1297 matches found
CVE-2023-24258
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request...
CVE-2023-24258
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request...
Sql injection
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request...
UBUNTU-CVE-2023-24258
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request...
[SECURITY] [DLA 3347-1] spip security update
Debian LTS Advisory DLA-3347-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin February 27, 2023 https://wiki.debian.org/LTS Package : spip Version : 3.2.4-1+deb10u10 It was discovered that SPIP, a content management system, was vulnerable to SQL injection, remote...
PT-2023-6830
Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.2.1 SPIP versions 3.2.18 through 4.0.10 SPIP versions 4.1.8 through 4.2.1 SPIP version 3.2.11-3+deb11u7 Description SPIP is susceptible to a flaw related to the improper handling of untrusted data during memory...
CVE-2023-24258
CVE-2023-24258 concerns SPIP. Affected: SPIP v4.1.5 and earlier. Root cause: SQL injection via the _oups parameter, enabling an attacker to execute arbitrary code through a crafted POST request. Impact: high/critical affected components, with remote code execution possible. Connected sources also...
CVE-2023-24258
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request...
CVE-2023-24258
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request...
DLA-3347-1 spip - security update
Bulletin has no description...
CVE-2023-24258
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request...
SPIP form PHP Injection
This module exploits a PHP code injection in SPIP. The vulnerability exists in the oubli parameter and allows an unauthenticated user to execute arbitrary commands with web user privileges. Branches 3.2, 4.0, 4.1 and 4.2 are concerned. Vulnerable versions are use exploit/multi/http/spip/rceform m...
Debian: Security Advisory (DSA-5325-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DSA-5325-1 : spip - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dsa-5325 advisory. It was discovered that SPIP, a website engine for publishing, would allow a malicious user to SQL injection attacks, or bypass authorization access. For the stable...
[SECURITY] [DSA 5325-1] spip security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5325-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 24, 2023 https://www.debian.org/security/faq -...
DSA-5325-1 spip - security update
Bulletin has no description...
Arbitrary Code Execution
spip is vulnerable to arbitrary code execution. An attacker can inject and execute malicious code through the GET parameter...
SPIP 3.2.x < 3.2.16, 4.x < 4.0.8, 4.1.x < 4.1.5 RCE Vulnerability
SPIP is prone to a remote code execution RCE vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...
The vulnerability of the SPIP content management system, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of the SPIP content management system is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request...