SPIP odt2spip command injection vulnerability

Versions of SPIP prior to 4.4.0 have a command injection vulnerability. This vulnerability stems from improper cleaning of file names uploaded through the document import form. Authorized users can embed shell metacharacters such as $id in non-ODT file names. This allows for the execution of OS...