PT-2017-9444

Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.2 and earlier Description A directory traversal issue exists, allowing remote attackers to enumerate system files via the var url parameter in a "valider xml" action. Recommendations For SPIP versions 3.1.2 and earlier, updat...