CVE-2004-2158

SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entryid parameter to 1 exit.php or 2 comment.php...

CVE-2004-2158

The CVE-2004-2158 entry describes a SQL injection in Serendipity 0.7-beta1, exploitable via the entry_id parameter to exit.php or comment.php. The root cause is improper sanitization of user input, allowing remote attackers to execute arbitrary SQL commands and potentially alter or retrieve data....