DEBIAN-CVE-2023-24258

SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request...

UBUNTU-CVE-2023-24258

SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request...

PT-2023-19502

Name of the Vulnerable Software and Affected Versions SPIP versions 4.1.5 and earlier Description The issue allows attackers to execute arbitrary code via a crafted POST request, exploiting a SQL injection vulnerability through the oups parameter. Recommendations For SPIP versions 4.1.5 and...

DEBIAN-CVE-2022-37155

RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute arbitrary code via the oups parameter...

PT-2022-23844

Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.13 through 4.1.2 Description The issue allows remote authenticated users to execute arbitrary code via the oups parameter. This enables attackers to perform remote code execution RCE on affected systems. Recommendations For...

SPIP 代码注入漏洞

SPIP is a Web-based content publishing system used primarily for online collaboration. A remote code execution vulnerability exists in versions of SPIP prior to 3.2.8, which are primarily used for online collaboration. The vulnerability stems from the oups parameter of /ecrire not properly...

PT-2022-19327

Name of the Vulnerable Software and Affected Versions Spip versions prior to 3.2.8 Description A PHP injection issue allows attackers to execute arbitrary PHP code via the oups parameter at the "/ecrire" API endpoint. Recommendations For versions prior to 3.2.8, update to version 3.2.8 or later t...