PT-2016-4571

Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 2.1 Description The issue arises from a failure to sanitize the dbType POST parameter in the include/functions installer.inc.php file, which is then used in an include call in the bundled-libs/serendipity...