1246 matches found
SPIP 安全漏洞
SPIP, an Internet publishing system, is free software distributed under the General Public License GPL. prive/formulaires/configurerpreferences.php in versions of SPIP prior to 3.2.8 is vulnerable to couleur, display, display navigation, displayoutils, imessage, and spipecran parameters are...
Ubuntu: Security Advisory (USN-4536-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-4536-1: SPIP vulnerabilities
Youssouf Boulouiz discovered that SPIP incorrectly handled login error messages. A remote attacker could potentially exploit this to conduct cross-site scripting XSS attacks. CVE-2019-16392 Gilles Vincent discovered that SPIP incorrectly handled password reset requests. A remote attacker could...
Authorization Bypas
spip is vulnerable to authorization bypass. The vulnerability exists as authenticated visitors can modify any published content and execute other modifications in the database...
Cross-site Scripting (XSS)
spip is vulnerable to cross-site scripting XSS. The vulnerability exists as it allows prive/formulaires/login.php XSS through error messages...
Open Redirects
spip is vulnerable to open redirects. The vulnerability exists as it mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character...
Information Disclosure
spip is vulnerable to information disclosure. The vulnerability exists as it displays different error messages from the password-reminder page depending on whether an e-mail address exists...
Cross-site Scripting (XSS)
spip is vulnerable to cross-site scripting XSS. The vulnerability exists as it is possible to inject arbitrary web script or HTML via a crafted string, through the PGP field, in ecrire/inc/textemini.php...
Ubuntu 18.04 LTS : SPIP vulnerabilities (USN-4536-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4536-1 advisory. Youssouf Boulouiz discovered that SPIP incorrectly handled login error messages. A remote attacker could potentially exploit this to conduct cross-site...
The vulnerability of the SPIP content management system, related to insufficient validation of input data, allows a hacker to execute arbitrary code.
The vulnerability of the SPIP content management system is related to insufficient validation of input data. Exploiting this vulnerability could allow a hacker to execute arbitrary code...
Exploit for Observable Discrepancy in Spip
CVE-2019-16394 A simple POC python script of CVE-2019-16394...
SPIP < 3.1.12, 3.2.x < 3.2.7 DB Injection Vulnerability
SPIP is prone to a database injection vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
DEBIAN-CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
Code injection
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
UBUNTU-CVE-2019-19830
core/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database...
