6 matches found
CVE-2026-104085
odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...
UBUNTU-CVE-2026-104085
odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...
CVE-2026-104085 odt2spip < 4.4.0 OS Command Injection via Document Filename
odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...
EUVD-2026-98963
odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...
CVE-2026-104085 odt2spip < 4.4.0 OS Command Injection via Document Filename
odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $id i...
SPIP odt2spip command injection vulnerability
Versions of SPIP prior to 4.4.0 have a command injection vulnerability. This vulnerability stems from improper cleaning of file names uploaded through the document import form. Authorized users can embed shell metacharacters such as $id in non-ODT file names. This allows for the execution of OS...