DEBIAN-CVE-2016-7999

ecrire/exec/validerxml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server side request forgery SSRF attacks via a URL in the varurl parameter in a validerxml action...

PT-2017-9444

Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.2 and earlier Description A directory traversal issue exists, allowing remote attackers to enumerate system files via the var url parameter in a "valider xml" action. Recommendations For SPIP versions 3.1.2 and earlier, updat...

PT-2017-9443

Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.2 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the var url parameter in a "valider xml" action. Recommendations For SPIP versions 3.1.2 and earlie...

PT-2017-9453

Name of the Vulnerable Software and Affected Versions SPIP versions 3.1.2 and earlier Description The issue allows remote attackers to conduct server-side request forgery SSRF attacks. This is achieved by providing a URL in the var url parameter within a valider xml action, targeting the...