CVE-2009-3041

SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for 1 ecrire/exec/install.php and 2 ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009...

CVE-2009-3041

The SPIP content management system (versions 1.9 before 1.9.2i and 2.0.x through 2.0.8) is vulnerable to a design/logic flaw due to improper access control on the ecrire/exec/install.php and ecrire/index.php files. This flaw allows remote attackers to perform unauthorized activities regarding ins...