DSA-4429-1 spip - security update

Bulletin has no description...

SPIP CMS 2.x / 3.x Add Administrator / File Upload

Exploit Title : Spip CMS 2.x/3.x Add Administrator Account & Arbitrary File Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Published Date : 26/03/2019 First Discovered Date : 2013 - 2014 Vendor Homepage : spip.net Software Download Links :...

Debian DSA-4228-1 : spip - security update

Several vulnerabilities were found in SPIP, a website engine for publishing, resulting in cross-site scripting and PHP injection. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-4228. The text itself is...

[SECURITY] [DSA 4228-1] spip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4228-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 14, 2018 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4228-1] spip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4228-1 [email protected] https://www.debian.org/security/ Sebastien Delafond June 14, 2018 https://www.debian.org/security/faq -...

DSA-4228-1 spip - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4228-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SPIP cross-site scripting vulnerability (CNVD-2017-35805)

SPIP is a free Web-based content publishing system. The system is primarily used for online collaboration. A cross-site scripting vulnerability exists in versions of SPIP prior to 3.1.7. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of...

Cross site scripting

Cross-site scripting XSS vulnerability stored in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/textemini.php...

CVE-2017-15736

Cross-site scripting XSS vulnerability stored in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/textemini.php...

CVE-2017-15736

Cross-site scripting XSS vulnerability stored in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/textemini.php...

CVE-2017-15736

Cross-site scripting XSS vulnerability stored in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/textemini.php...

DEBIAN-CVE-2017-15736

Cross-site scripting XSS vulnerability stored in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/textemini.php...

UBUNTU-CVE-2017-15736

Cross-site scripting XSS vulnerability stored in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/textemini.php...

CVE-2017-15736

Cross-site scripting XSS vulnerability stored in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/textemini.php...

CVE-2017-15736

CVE-2017-15736 is a stored XSS in SPIP (pre-3.1.7) exploitable via crafted strings in the PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/texte_mini.php. Affected versions: SPIP before 3.1.7. Remediation: upgrade to SPIP 3.1.7 or later. Exploitation details are not described...

CVE-2017-15736

Cross-site scripting XSS vulnerability stored in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/textemini.php...

Debian DSA-3890-1 : spip - security update

Emeric Boit of ANSSI reported that SPIP, a website engine for publishing, insufficiently sanitises the value from the X-Forwarded-Host HTTP header field. An unauthenticated attacker can take advantage of this flaw to cause remote code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

[SECURITY] [DSA 3890-1] spip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3890-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 21, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3890-1] spip security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3890-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso June 21, 2017 https://www.debian.org/security/faq -...