Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Thu, 24 Sep 2009 13:02:49 -0400 (EDT)
From: "Steven M. Christey" <>
Subject: Re: CVE request: serendipity freetag plugin

Name: CVE-2009-3337
Status: Candidate
Reference: CONFIRM:
Reference: BID:36376
Reference: URL:
Reference: SECUNIA:36706
Reference: URL:

SQL injection vulnerability in the Freetag (serendipity_event_freetag)
plugin before 3.09 for Serendipity (S9Y) allows remote attackers to
execute arbitrary SQL commands via an unspecified parameter associated
with Meta keywords in a blog entry.

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.