Launchpad.net

CVE 2007-1326

SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[multiCat][] parameter.

See the CVE page on Mitre.org for more details.

References