1290 matches found
CVE-2008-5813
SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information...
CVE-2008-5812
Technical details about CVE-2008-5812 are not publicly provided in the supplied documents; there is no explicit information on affected products, root cause, impact, or remediation. Monitor official advisories for updates.
CVE-2008-5813
CVE-2008-5813 describes a SQL injection in SPIP’s inc/rubriques.php. Affected versions are SPIP 1.8 before 1.8.3b, SPIP 1.9 before 1.9.2g, and SPIP 2.0 before 2.0.2. The vulnerability allows remote attackers to execute arbitrary SQL commands via the ID parameter. The provided connected documents ...
SPIP Version Detection
Binary data 4802.prm...
Unfixed XSS vulnerability at www.spip-zone.info
Security researcher The Rat, has submitted on 25/12/2008 a cross-site-scripting XSS vulnerability affecting www.spip-zone.info, which at the time of submission ranked 766708 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2009. It is...
Remote file inclusion
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
DEBIAN-CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
SPIP v1.7 Remote File Inclusion Bug
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++...
CVE-2007-4525
SPIP 1.7.2 is affected by a PHP remote file inclusion in inc-calcul.php3, where a URL supplied in the squelette_cache parameter can lead to arbitrary PHP code execution. The vector is distinct from CVE-2006-1702. Some third‑party researchers dispute the vulnerability due to claims about squelette...
PT-2007-5696 · Spip · Spip
Name of the Vulnerable Software and Affected Versions: SPIP version 1.7.2 Description: A remote file inclusion issue in SPIP allows remote attackers to potentially execute arbitrary PHP code. The issue is related to the squelette cache parameter in the inc-calcul.php3 file. However, it has been...
CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
spip-rfi.txt
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++...
Echo Security Advisory 2006.59
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability...
Agora 1.4 RC1 - 'MysqlfinderAdmin.php' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability...
SPIP-Agora_1-4-RC1.txt
ToXiC SPIP-Agora1-4-RC1: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: SPIP-Agora1-4-RC1 Sorce Code: http://www.agora.gouv.fr/IMG/zip/SPIP-Agora1-4-RC1.zip Page: Wiki.php Dir : /modules/Wiki/ ExPloit :...