VULNERABILITY INTELLIGENCE

CVE-2009-3337

CVSS score7.5 NONE

EPSS probability1.40%

CISA KEVNot currently listed

Published2009-09-24

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for Serendipity (S9Y) allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry.

Weakness classification

nvd@nist.gov: CWE-89

Primary references

cve@mitre.org — Vendor Advisory
cve@mitre.org — Third Party Advisory
cve@mitre.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry