CVE-2022-28959

Multiple cross-site scripting XSS vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web scripts or HTML...

UBUNTU-CVE-2022-28960

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the oups parameter at /ecrire...

Sql injection

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the oups parameter at /ecrire...

Sql injection

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

CVE-2022-28961

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

CVE-2022-28961

CVE-2022-28961 affects SPIP Web Framework v3.1.13 and earlier, with multiple SQL injection vulnerabilities exploitable via /ecrire through the lier_trad and where parameters. Connected sources corroborate that the issue is addressed in SPIP releases by upgrading to at least 3.1.14 or 3.2.x with 3...

CVE-2022-28961

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

CVE-2022-28960

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the oups parameter at /ecrire...

CVE-2022-28960

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the oups parameter at /ecrire...

CVE-2022-28960

CVE-2022-28960 affects SPIP before version 3.2.8, where the _oups parameter in /ecrire allows remote PHP code execution due to inadequate input handling. The issue is a PHP code injection vulnerability in SPIP’s administrative area, enabling an attacker to run arbitrary PHP on the server. Exploit...

CVE-2022-28959

CVE-2022-28959 affects SPIP Web Framework’s spip.php component in versions up to and including 3.1.13, enabling cross-site scripting (XSS) and allowing an attacker to run arbitrary web scripts or HTML. The provided documents consistently identify the vulnerability as an XSS issue in /spip.php and...

CVE-2022-28959

Multiple cross-site scripting XSS vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web scripts or HTML...

CVE-2022-28959

Multiple cross-site scripting XSS vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web scripts or HTML...

SPIP 跨站脚本漏洞

SPIP is a web-based content publishing system. A cross-site scripting vulnerability exists in SPIP version 3.1.13 and prior versions, which originates in /spip.php. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could use...

SPIP 代码注入漏洞

SPIP is a Web-based content publishing system used primarily for online collaboration. A remote code execution vulnerability exists in versions of SPIP prior to 3.2.8, which are primarily used for online collaboration. The vulnerability stems from the oups parameter of /ecrire not properly...

SPIP SQL注入漏洞

SPIP is a web-based content publishing system. A SQL injection vulnerability exists in SPIP version 3.1.13 and earlier, which stems from a lack of validation of external input SQL statements in the liertrad and where parameters of /ecrire. An attacker could use this vulnerability to execute illeg...

Debian: Security Advisory (DLA-2949-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2949-1] spip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2949-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 15, 2022 https://wiki.debian.org/LTS -...

SPIP < 3.2.14, 4.x < 4.0.5 Multiple Vulnerabilities

SPIP is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...

Debian DLA-2949-1 : spip - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2949 advisory. - SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary code. CVE-2022-26846 - SPIP before 3.2.14 and 4.x before 4.0.5...