1337 matches found
Exploit for Observable Discrepancy in Spip
CVE-2019-16394 A simple POC python script of CVE-2019-16394...
SPIP < 3.1.12, 3.2.x < 3.2.7 DB Injection Vulnerability
SPIP is prone to a database injection vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
DEBIAN-CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
UBUNTU-CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
Code injection
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
CVE-2019-19830
CVE-2019-19830 affects SPIP 3.2.x before 3.2.7, where the medias plugin (core /plugins/medias) allows a remote authenticated author to inject content into the database due to the underlying vulnerability in the media handling. The issue is a database injection risk that can impact data integrity....
CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
SPIP content injection vulnerability
SPIP is a Web-based content publishing system. The system is primarily used for online collaboration. A security vulnerability exists in core/plugins/medias in version 3.2.x prior to SPIP 3.2.7. A remote attacker could exploit the vulnerability to inject content into the database...
Debian DSA-4583-1 : spip - security update
A vulnerability was discovered in the SPIP publishing system, which could result in unauthorised writes to the database by authors. The oldstable distribution stretch is not affected. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debia...
Debian: Security Advisory (DSA-4583-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4583-1] spip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4583-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 13, 2019 https://www.debian.org/security/faq -...
DSA-4583-1 spip - security update
Bulletin has no description...
Debian: Security Advisory (DLA-1975-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1975-1 : spip security update
It was discovered that SPIP, a website engine for publishing, would allow unauthenticated users to modify published content and write to the database, perform cross-site request forgeries, and enumerate registered users. For Debian 8 'Jessie', these problems have been fixed in version...
[SECURITY] [DLA 1975-1] spip security update
Package : spip Version : 3.0.17-2+deb8u5 CVE ID : CVE-2019-16391 CVE-2019-16392 CVE-2019-16393 CVE-2019-16394 It was discovered that SPIP, a website engine for publishing, would allow unauthenticated users to modify published content and write to the database, perform cross-site request forgeries...