SPIP CMS < 4.1.16 / 4.2.x < 4.2.13 / 4.3.x < 4.3.0-alpha2 Remote Code Execution

The SPIP CMS versions prior to 4.1.16 or 4.2.x prior to 4.2.13 or 4.3.x prior to 4.3.0-alpha2 are vulnerable to an unauthenticated Remote Code Execution through the 'porteplume' plugin by sending a specially forged HTTP request. No source data...

The vulnerability of the SPIP content management system, related to the restoration of unreliable data in memory, allows a hacker to execute arbitrary code.

The vulnerability of the SPIP content management system is related to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code using specially created data transmitted to the application...

SPIP CMS < 3.2.18 / 4.0.x < 4.0.10 / 4.1.x < 4.1.8 / 4.2.x < 4.2.1 Object Injection RCE

The SPIP CMS is vulnerable to an unauthenticated Remote Code Execution via form values in the public area because serialization is mishandled. No source data...

SPIP CMS < 3.2.12 / 4.0.x < 4.0.1 SQL Injection

The SPIP CMS installed on the remote host is affected by an unauthenticated SQL injection vulnerability due to improper sanitization of user-supplied input. A remote attacker can exploit this issue to manipulate SQL queries, resulting in the disclosure of sensitive information and modification of...

SPIP CMS 3.2.x < 3.2.8 Remote Code Execution

According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.1.14 or 3.2.x prior to 3.2.8. It is, therefore, affected by multiples vulnerabilities : - An SQL injection vulnerabilities at /ecrire via the liertrad and where parameters - A PHP code...

SPIP CMS 4.0.x < 4.0.5 Multiples Vulnerabilities

According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.2.14 or 4.0.x prior to 4.0.5. It is, therefore, affected by multiples vulnerabilities : - A Remote Code Execution - Unauthenticated access to information about editorial objects. Note...

SPIP CMS < 4.1.7 SQL Injection

According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 4.1.5. It is, therefore, affected by an SQL injection vulnerability via the oups parameter. Note that the scanner has not tested for these issues but has instead relied only on the...

SPIP CMS < 3.2.16 Remote Code Execution

According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.2.16 or 4.0.x prior to 4.0.8 or 4.1.X prior to 4.1.5. It is, therefore, affected by an Remote Code Execution via the oups parameter. Note that the scanner has not tested for these issue...

SPIP CMS 4.1.x < 4.1.2 Remote Code Execution

According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.2.16 or 4.0.x prior to 4.0.8 or 4.1.X prior to 4.1.5. It is, therefore, affected by an Remote Code Execution via the oups parameter. Note that the scanner has not tested for these issue...

SPIP CMS 4.0.x < 4.0.1 Multiples Vulnerabilities

According to its self-reported version, the instance of SPIP CMS running on the remote web server is 4.0.x prior to 4.0.1. It is, therefore, affected by multiples vulnerabilities : - A Remote Code Execution through a malicious picture with a double extension - Multiples Cross-Site Request Forgery...

SPIP CMS < 3.2.14 Multiples Vulnerabilities

According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.2.14 or 4.0.x prior to 4.0.5. It is, therefore, affected by multiples vulnerabilities : - A Remote Code Execution - Unauthenticated access to information about editorial objects. Note...

SPIP CMS < 3.1.14 Multiples Vulnerabilities

According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.1.14 or 3.2.x prior to 3.2.8. It is, therefore, affected by multiples vulnerabilities : - An SQL injection vulnerabilities at /ecrire via the liertrad and where parameters - A PHP code...

SPIP CMS 4.0.x < 4.0.8 Remote Code Execution

According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.2.16 or 4.0.x prior to 4.0.8 or 4.1.X prior to 4.1.5. It is, therefore, affected by an Remote Code Execution via the oups parameter. Note that the scanner has not tested for these issue...

DEBIAN-CVE-2022-37155

RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute arbitrary code via the oups parameter...

The vulnerability of the SPIP content management system, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the SPIP content management system is related to insufficient validation of input data. Exploiting this vulnerability could allow a hacker to execute arbitrary code...

PT-2019-4105 · Spip +1 · Spip +1

Name of the Vulnerable Software and Affected Versions: SPIP versions prior to 3.1.11 SPIP versions 3.2 prior to 3.2.5 Description: The issue is related to the lack of protection of the web page structure in the SPIP content management system. This can be exploited by a remote attacker to compromi...

CVE-2019-11071

SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because varmemotri is mishandled...

SPIP CMS 2.x / 3.x Add Administrator / File Upload

Exploit Title : Spip CMS 2.x/3.x Add Administrator Account & Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Published Date : 26/03/2019 First Discovered Date : 2013 - 2014 Vendor Homepage : spip.net Software Download Links :...

SPIP CMS < 2.0.23/ 2.1.22/3.0.9 - Privilege Escalation

!/usr/bin/env python Exploit Title: SPIP - CMS " exit baseurl = sys.argv1 login = sys.argv2 mail = sys.argv3 cookiejar = cookieli...

SPIP CMS (XSS/URL Redirecting) Multiple Vulnerability

Exploit for php platform in category web applications ===================================================== SPIP CMS XSS/URL Redirecting Multiple Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...