1516 matches found
SPIP Version Detection
Binary data 4802.prm...
Unfixed XSS vulnerability at www.spip-zone.info
Security researcher The Rat, has submitted on 25/12/2008 a cross-site-scripting XSS vulnerability affecting www.spip-zone.info, which at the time of submission ranked 766708 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2009. It is...
Remote file inclusion
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
DEBIAN-CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
CVE-2007-4525
SPIP 1.7.2 is affected by a PHP remote file inclusion in inc-calcul.php3, where a URL supplied in the squelette_cache parameter can lead to arbitrary PHP code execution. The vector is distinct from CVE-2006-1702. Some third‑party researchers dispute the vulnerability due to claims about squelette...
CVE-2007-4525
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
CVE-2007-4525: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...
SPIP v1.7 Remote File Inclusion Bug
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++...
PT-2007-5696 · Spip · Spip
Name of the Vulnerable Software and Affected Versions: SPIP version 1.7.2 Description: A remote file inclusion issue in SPIP allows remote attackers to potentially execute arbitrary PHP code. The issue is related to the squelette cache parameter in the inc-calcul.php3 file. However, it has been...
spip-rfi.txt
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ +++++++ SPIP v1.7 Remote File Inclusion Bug ! ++++++++...
Echo Security Advisory 2006.59
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability...
Agora 1.4 RC1 - 'MysqlfinderAdmin.php' Remote File Inclusion
\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV59$2006 ----------------------------------------------------------------------------------------------- ECHOADV59$2006Agora 1.4 RC1 "$SESSIONPATHCOMPOSANT" Remote File Inclusion Vulnerability...
SPIP-Agora_1-4-RC1.txt
ToXiC SPIP-Agora1-4-RC1: Remote File Inclusion by ToXiC CreW ToXic Security Italian CreW BuG FounD by Drago84 Application Affect: SPIP-Agora1-4-RC1 Sorce Code: http://www.agora.gouv.fr/IMG/zip/SPIP-Agora1-4-RC1.zip Page: Wiki.php Dir : /modules/Wiki/ ExPloit :...
Remote file inclusion
PHP remote file inclusion vulnerability in spiplogin.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter...
CVE-2006-1702
PHP remote file inclusion vulnerability in spiplogin.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter...