CVE-2007-1326
SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[multiCat][] parameter.
Date published : 2007-03-07
http://www.securityfocus.com/archive/1/461671/100/0/threaded