CVE-2009-3337

Summary

SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for Serendipity (S9Y) allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://blog.s9y.org/archives/210-Security-update-for-Freetag-Plugin.html
• http://secunia.com/advisories/36706
• http://www.securityfocus.com/bid/36376

References

• http://blog.s9y.org/archives/210-Security-update-for-Freetag-Plugin.html
• http://secunia.com/advisories/36706
• http://www.securityfocus.com/bid/36376

• ←Previous
• Next→