CVE-2009-3337 | BDVDB-2026-38648 Detail

Description#

SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for Serendipity (S9Y) allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://blog.s9y.org/archives/210-Security-update-for-Freetag-Plugin.html
http://secunia.com/advisories/36706
http://www.securityfocus.com/bid/36376

Exploit#

No public exploit known

History#

Version 12009-09-24Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.