EUVD-2016-10780

Malware in sbrugna...

Cross site scripting

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9997

SPIP 3.1.x is vulnerable to a Reflected Cross‑Site Scripting (XSS) in the /ecrire/exec/puce_statut.php endpoint via the $id parameter (as shown by /ecrire/?exec=puce_statut). Several connected sources confirm this CVE (CVE-2016-9997) and describe it as an XSS in SPIP 3.1.x. Debian’s DLA-760-1 not...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...

CVE-2016-9997

SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/pucestatut.php involving the $id parameter, as demonstrated by a /ecrire/?exec=pucestatut URL...