2 matches found
CVE-2026-72710 SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection
SPIP before 4.4.18 contains a mass assignment vulnerability in the editerobjet action that allows unauthenticated attackers to write arbitrary rows to any SQL table lacking a champseditables allowlist by supplying an attacker-controlled arg parameter resolving to internal database tables. Attacke...
9.8CVSS0.01122EPSS
SaveExploits0References3
Linux Distros Unpatched Vulnerability : CVE-2016-6620
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in phpMyAdmin. Some data is passed to the PHP unserialize function without verification that it's valid serialized data. The...
9.8CVSS8.8AI score0.03189EPSS
SaveExploits0References2
20