CVE-2008-5813

SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5812

Multiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 have unknown impact and attack vectors...

CVE-2008-5813

SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5812

Technical details about CVE-2008-5812 are not publicly provided in the supplied documents; there is no explicit information on affected products, root cause, impact, or remediation. Monitor official advisories for updates.

CVE-2008-5813

CVE-2008-5813 describes a SQL injection in SPIP’s inc/rubriques.php. Affected versions are SPIP 1.8 before 1.8.3b, SPIP 1.9 before 1.9.2g, and SPIP 2.0 before 2.0.2. The vulnerability allows remote attackers to execute arbitrary SQL commands via the ID parameter. The provided connected documents ...

CVE-2008-5813: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-5812: Undefined Security Weakness

Multiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 have unknown impact and attack vectors...

SPIP Version Detection

Binary data 4802.prm...

Unfixed XSS vulnerability at www.spip-zone.info

Security researcher The Rat, has submitted on 25/12/2008 a cross-site-scripting XSS vulnerability affecting www.spip-zone.info, which at the time of submission ranked 766708 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2009. It is...

Remote file inclusion

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

DEBIAN-CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4525

SPIP 1.7.2 is affected by a PHP remote file inclusion in inc-calcul.php3, where a URL supplied in the squelette_cache parameter can lead to arbitrary PHP code execution. The vector is distinct from CVE-2006-1702. Some third‑party researchers dispute the vulnerability due to claims about squelette...

SPIP v1.7 Remote File Inclusion Bug

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++...

PT-2007-5696 · Spip · Spip

Name of the Vulnerable Software and Affected Versions: SPIP version 1.7.2 Description: A remote file inclusion issue in SPIP allows remote attackers to potentially execute arbitrary PHP code. The issue is related to the squelette cache parameter in the inc-calcul.php3 file. However, it has been...

CVE-2007-4525: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

spip-rfi.txt

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++...