What’s Vulnerable › Vulnerabilities

CVE-2017-1000129

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-11-17 · updated 2026-06-17
• Weakness: CWE-89

Description

Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure

Affected products

• s9y Serendipity: 2.0.3

References

• https://blog.s9y.org/archives/269-Serendipity-2.0.4-and-2.1-beta2-released.html
• https://blog.s9y.org/archives/269-Serendipity-2.0.4-and-2.1-beta2-released.html

Get alerted when CVE-2017-1000129 or the next vulnerability affects your stack