Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/02/26 9:31 p.m.•15 views

EUVD-2026-8884

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote cod...

8.7CVSS7AI score0.00571EPSS
SaveExploits0References4
OSV
OSV
•added 2026/02/26 9:28 p.m.•39 views

DEBIAN-CVE-2026-22206

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote cod...

8.7CVSS7.1AI score0.00571EPSS
SaveExploits0References1
OSV
OSV
•added 2026/02/26 9:28 p.m.•16 views

UBUNTU-CVE-2026-22206

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote cod...

8.8CVSS6.7AI score0.00571EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/02/26 8:17 p.m.•8 views

CVE-2026-22206

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote cod...

8.8CVSS6.7AI score0.00571EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/26 12:00 a.m.•1 views

CVE-2026-22206: Improper Neutralization of Special Elements used in an SQL Command

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote cod...

8.8CVSS6.7AI score0.00571EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/26 12:00 a.m.•11 views

PT-2026-22182

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.4.10 Description SPIP versions before 4.4.10 have a SQL injection flaw. Authenticated low-privilege users can execute arbitrary SQL queries through union-based injection techniques. Attackers can combine this SQL...

8.8CVSS6.8AI score0.00571EPSS
SaveExploits0References8
Rows per page
Query Builder