CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

UBUNTU-CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9997

SPIP 3.1.x is vulnerable to a Reflected Cross‑Site Scripting (XSS) in the /ecrire/exec/puce_statut.php endpoint via the $id parameter (as shown by /ecrire/?exec=puce_statut). Several connected sources confirm this CVE (CVE-2016-9997) and describe it as an XSS in SPIP 3.1.x. Debian’s DLA-760-1 not...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the "$plugin" parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the "$id" parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

CVE-2016-9998

Summary: SPIP 3.1.x is affected by a reflected Cross-Site Scripting vulnerability in the /ecrire/exec/info_plugin.php handler, triggered by the $plugin parameter and exploitable via a crafted /ecrire/?exec=info_plugin URL. This CVE entry corresponds to CVE-2016-9998. What’s affected: SPIP 3.1.x i...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9997: Improper Neutralization of Input During Web Page Generation

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9998: Improper Neutralization of Input During Web Page Generation

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/infoplugin.php involving the $plugin parameter, as demonstrated by a /ecrire/?exec=infoplugin URL...

PT-2016-7892

Name of the Vulnerable Software and Affected Versions SPIP version 3.1.x Description The issue is related to a Reflected Cross Site Scripting problem. It affects the /ecrire/exec/puce statut.php endpoint, specifically involving the id parameter. An example of exploitation is through a...

PT-2016-7893

Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.x Description The issue concerns a Reflected Cross Site Scripting problem. It involves the /ecrire/exec/info plugin.php endpoint, specifically the $plugin parameter. An example of exploitation is through a /ecrire/?exec=info...

Debian DLA-738-1 : spip security update

It was discovered that there was a cross-site scripting XSS vulnerability in spip, a website publishing engine, which allowed remote attackers to inject arbitrary web script or HTML via the 'rac' parameter. For Debian 7 'Wheezy', this issue has been fixed in spip version 2.1.17-1+deb7u7. We...