Unrated severityNVD Advisory· Published Sep 15, 2015· Updated Jun 17, 2026
CVE-2015-6943
CVE-2015-6943
Description
SQL injection vulnerability in the serendipity_checkCommentToken function in include/functions_comments.inc.php in Serendipity before 2.0.2, when "Use Tokens for Comment Moderation" is enabled, allows remote administrators to execute arbitrary SQL commands via the serendipity[id] parameter to serendipity_admin.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <2.0.2
- Range: <2.0.2
Patches
Vulnerability mechanics
References
5- blog.s9y.org/archives/265-Serendipity-2.0.2-Security-Fix-Release.htmlnvdPatch
- blog.curesec.com/article/blog/Serendipity-201-Blind-SQL-Injection-52.htmlnvdExploit
- packetstormsecurity.com/files/133428/Serendipity-2.0.1-Blind-SQL-Injection.htmlnvdExploit
- seclists.org/fulldisclosure/2015/Sep/10nvdExploit
- www.securitytracker.com/id/1033558nvd
News mentions
0No linked articles in our index yet.