1297 matches found
SPIP CMS 4.0.x < 4.0.5 Multiples Vulnerabilities
According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.2.14 or 4.0.x prior to 4.0.5. It is, therefore, affected by multiples vulnerabilities : - A Remote Code Execution - Unauthenticated access to information about editorial objects. Note...
SPIP CMS 3.2.x < 3.2.8 Remote Code Execution
According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.1.14 or 3.2.x prior to 3.2.8. It is, therefore, affected by multiples vulnerabilities : - An SQL injection vulnerabilities at /ecrire via the liertrad and where parameters - A PHP code...
SPIP CMS < 4.1.7 SQL Injection
According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 4.1.5. It is, therefore, affected by an SQL injection vulnerability via the oups parameter. Note that the scanner has not tested for these issues but has instead relied only on the...
SPIP CMS < 3.2.16 Remote Code Execution
According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.2.16 or 4.0.x prior to 4.0.8 or 4.1.X prior to 4.1.5. It is, therefore, affected by an Remote Code Execution via the oups parameter. Note that the scanner has not tested for these issue...
SPIP CMS < 3.1.14 Multiples Vulnerabilities
According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.1.14 or 3.2.x prior to 3.2.8. It is, therefore, affected by multiples vulnerabilities : - An SQL injection vulnerabilities at /ecrire via the liertrad and where parameters - A PHP code...
SPIP CMS 4.0.x < 4.0.8 Remote Code Execution
According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.2.16 or 4.0.x prior to 4.0.8 or 4.1.X prior to 4.1.5. It is, therefore, affected by an Remote Code Execution via the oups parameter. Note that the scanner has not tested for these issue...
SPIP CMS 4.0.x < 4.0.1 Multiples Vulnerabilities
According to its self-reported version, the instance of SPIP CMS running on the remote web server is 4.0.x prior to 4.0.1. It is, therefore, affected by multiples vulnerabilities : - A Remote Code Execution through a malicious picture with a double extension - Multiples Cross-Site Request Forgery...
SPIP CMS 4.1.x < 4.1.2 Remote Code Execution
According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.2.16 or 4.0.x prior to 4.0.8 or 4.1.X prior to 4.1.5. It is, therefore, affected by an Remote Code Execution via the oups parameter. Note that the scanner has not tested for these issue...
SPIP CMS < 3.2.14 Multiples Vulnerabilities
According to its self-reported version, the instance of SPIP CMS running on the remote web server is prior to 3.2.14 or 4.0.x prior to 4.0.5. It is, therefore, affected by multiples vulnerabilities : - A Remote Code Execution - Unauthenticated access to information about editorial objects. Note...
Remote Code Execution (RCE)
SPIP is vulnerable to Remote Code Execution RCE. The vulnerability exists because of the improper sanitization of form values in the public area, allowing an attacker to inject and execute malicious code...
SQL Injection
SPIP is vulnerable to SQL Injection. The vulnerability is caused due to the oups parameter which allows an attacker to execute arbitrary code through a crafted POST request...
Debian: Security Advisory (DLA-695-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-760-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-738-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3347-2] spip regression update
Debian LTS Advisory DLA-3347-2 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin March 03, 2023 https://wiki.debian.org/LTS Package : spip Version : 3.2.4-1+deb10u11 It was discovered that the fix for CVE-2023-27372 broke deactivation of plugins with dependencies. Fo...
Ubuntu: Security Advisory (USN-5482-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DSA-5367-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-3347-2 spip - regression update
Bulletin has no description...
USN-5482-2: SPIP vulnerabilities
USN-5482-1 fixed several vulnerabilities in SPIP. This update provides the corresponding updates for Ubuntu 20.04 LTS for CVE-2021-44118, CVE-2021-44120, CVE-2021-44122 and CVE-2021-44123. Original advisory details: It was discovered that SPIP incorrectly validated inputs. An authenticated attack...
USN-5482-2 spip vulnerabilities
USN-5482-1 fixed several vulnerabilities in SPIP. This update provides the corresponding updates for Ubuntu 20.04 LTS for CVE-2021-44118, CVE-2021-44120, CVE-2021-44122 and CVE-2021-44123. Original advisory details: It was discovered that SPIP incorrectly validated inputs. An authenticated attack...