S9Y Serendipity : Security vulnerabilities, CVEs sql injection published in 2015

CVE-2015-6943

SQL injection vulnerability in the serendipity_checkCommentToken function in include/functions_comments.inc.php in Serendipity before 2.0.2, when "Use Tokens for Comment Moderation" is enabled, allows remote administrators to execute arbitrary SQL commands via the serendipity[id] parameter to serendipity_admin.php.

Max CVSS

6.0

EPSS Score

0.27%

Published

2015-09-15

Updated

2016-12-22

1 vulnerabilities found

S9Y » Serendipity : Security Vulnerabilities, CVEs, Published In 2015 (Sql injection)

CVE-2015-6943