CVE-2022-28961

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

CVE-2022-28961

CVE-2022-28961 affects SPIP Web Framework v3.1.13 and earlier, with multiple SQL injection vulnerabilities exploitable via /ecrire through the lier_trad and where parameters. Connected sources corroborate that the issue is addressed in SPIP releases by upgrading to at least 3.1.14 or 3.2.x with 3...

CVE-2022-28961

Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...

CVE-2022-28960

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the oups parameter at /ecrire...

CVE-2022-28960

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the oups parameter at /ecrire...

CVE-2022-28960

CVE-2022-28960 affects SPIP before version 3.2.8, where the _oups parameter in /ecrire allows remote PHP code execution due to inadequate input handling. The issue is a PHP code injection vulnerability in SPIP’s administrative area, enabling an attacker to run arbitrary PHP on the server. Exploit...

CVE-2022-28959

Multiple cross-site scripting XSS vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web scripts or HTML...

CVE-2022-28959

CVE-2022-28959 affects SPIP Web Framework’s spip.php component in versions up to and including 3.1.13, enabling cross-site scripting (XSS) and allowing an attacker to run arbitrary web scripts or HTML. The provided documents consistently identify the vulnerability as an XSS issue in /spip.php and...

CVE-2022-28959

Multiple cross-site scripting XSS vulnerabilities in the component /spip.php of Spip Web Framework v3.1.13 and below allows attackers to execute arbitrary web scripts or HTML...

SPIP SQL注入漏洞

SPIP is a web-based content publishing system. A SQL injection vulnerability exists in SPIP version 3.1.13 and earlier, which stems from a lack of validation of external input SQL statements in the liertrad and where parameters of /ecrire. An attacker could use this vulnerability to execute illeg...

SPIP 跨站脚本漏洞

SPIP is a web-based content publishing system. A cross-site scripting vulnerability exists in SPIP version 3.1.13 and prior versions, which originates in /spip.php. The vulnerability stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could use...

SPIP 代码注入漏洞

SPIP is a Web-based content publishing system used primarily for online collaboration. A remote code execution vulnerability exists in versions of SPIP prior to 3.2.8, which are primarily used for online collaboration. The vulnerability stems from the oups parameter of /ecrire not properly...

Debian: Security Advisory (DLA-2949-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2949-1] spip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2949-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 15, 2022 https://wiki.debian.org/LTS -...

DLA-2949-1 spip - security update

Bulletin has no description...

Debian DLA-2949-1 : spip - LTS security update

The remote Debian 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-2949 advisory. - SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary code. CVE-2022-26846 - SPIP before 3.2.14 and 4.x before 4.0.5...

SPIP < 3.2.14, 4.x < 4.0.5 Multiple Vulnerabilities

SPIP is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...

SPIP Information Disclosure Vulnerability (CNVD-2022-21820)

SPIP is a Web-based content distribution system used primarily for online collaboration. A security vulnerability exists in SPIP, which stems from a web-based system or product that does not properly restrict access to resources from unauthorized roles. An unauthenticated attacker could use this...

Remote Code Execution (RCE)

spip is vulnerable to remote code execution. The vulnerability exists due to a lack of validation allowing an attacker to execute maliciously crafted script in the system...

Information Disclosure

spip is vulnerable to information disclosure. The vulnerability exists due to a lack of validation of access allowing an attacker to access information about editorial objects...