PT-2024-39069

Name of the Vulnerable Software and Affected Versions: SPIP versions prior to 4.3.2, 4.2.16, and 4.1.18 Description: SPIP is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HT...