Lucene search
+L

9 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/25 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2016-7980

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of...

8.8CVSS7.3AI score0.04122EPSS
SaveExploits4References2
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.11 views

Debian: Security Advisory (DLA-695-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.1AI score0.20515EPSS
SaveExploits16References3
OSV
OSV
added 2017/01/18 5:59 p.m.16 views

CVE-2016-7980

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...

8.8CVSS9AI score
SaveExploits0References8
Debian CVE
Debian CVE
added 2017/01/18 5:0 p.m.43 views

CVE-2016-7980

Cross-site request forgery CSRF vulnerability in ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted validerxml request. NOTE: this issue can be combin...

8.8CVSS9.1AI score0.04122EPSS
SaveExploits4
CVE
CVE
added 2017/01/18 5:0 p.m.78 views

CVE-2016-7980

CVE-2016-7980 is a CSRF vulnerability in SPIP 3.1.2 and earlier, where the valider_xml.php endpoint can be abused to hijack administrator authentication to trigger the XML validator on a local file. The issue can be chained with CVE-2016-7998 to enable potential arbitrary PHP code execution. Publ...

8.8CVSS8.9AI score0.04122EPSS
SaveExploits4References8Affected Software1
zdt
zdt
added 2016/10/20 12:0 a.m.87 views

SPIP 3.1.2 Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications SPIP 3.1.2 Exec Code Cross-Site Request Forgery CVE-2016-7980 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software,...

6.8CVSS8.6AI score0.13649EPSS
SaveExploits8
Exploit DB
Exploit DB
added 2016/10/20 12:0 a.m.49 views

SPIP 3.1.2 - Cross-Site Request Forgery

SPIP 3.1.2 Exec Code Cross-Site Request Forgery CVE-2016-7980 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software, distributed under the GNU/GPL licence. Vulnerability...

8.8CVSS7.8AI score0.04122EPSS
SaveExploits4
exploitpack
exploitpack
added 2016/10/20 12:0 a.m.25 views

SPIP 3.1.2 - Cross-Site Request Forgery

SPIP 3.1.2 - Cross-Site Request Forgery SPIP 3.1.2 Exec Code Cross-Site Request Forgery CVE-2016-7980 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software, distributed under...

6.8CVSS0.6AI score0.13649EPSS
SaveExploits8
Packet Storm
Packet Storm
added 2016/10/19 12:0 a.m.41 views

SPIP 3.1.2 Cross Site Request Forgery

SPIP 3.1.2 Exec Code Cross-Site Request Forgery CVE-2016-7980 Product Description SPIP is a publishing system for the Internet, which put importance on collaborative working, multilingual environments and ease of use. It is free software, distributed under the GNU/GPL licence. Vulnerability...

0.6AI score0.13649EPSS
SaveExploits8
Rows per page
Query Builder