SQL injection vulnerability in include/functions_entries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via the cat parameter.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:s9y:serendipity:2.0.5:*:*:*:*:*:*:*",
"range": [
{
"introduced": "2.0.5"
},
{
"last_affected": "2.0.5"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "c62d667287f2d76c81e03a740a581eb3c51249b6"
}
],
"source": "REFERENCES_COMMIT"
},
{
"original_tag": "2.1-rc1",
"range": [
{
"fixed": "ba6d9ee12711f56844bfa00eb3f4010dd1f70258"
}
],
"source": "REFERENCES_TAG"
}
]
}