[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <Pine.GSO.4.51.0909241302430.15652@faron.mitre.org>
Date: Thu, 24 Sep 2009 13:02:49 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: serendipity freetag plugin
======================================================
Name: CVE-2009-3337
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3337
Reference: CONFIRM:http://blog.s9y.org/archives/210-Security-update-for-Freetag-Plugin.html
Reference: BID:36376
Reference: URL:http://www.securityfocus.com/bid/36376
Reference: SECUNIA:36706
Reference: URL:http://secunia.com/advisories/36706
SQL injection vulnerability in the Freetag (serendipity_event_freetag)
plugin before 3.09 for Serendipity (S9Y) allows remote attackers to
execute arbitrary SQL commands via an unspecified parameter associated
with Meta keywords in a blog entry.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
