spip vulnerabilities (Debian)
86 vulnerabilities.
-
spipDebian SPIP before 4.4.29 Authenticated SQL Injection via where Parameter 7.1 High -
spipDebian SPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_url 5.3 Medium -
spipDebian SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection 9.3 Critical -
spipDebian SPIP < 4.4.18 Missing Authorization via ecrire/action/ 9.3 Critical -
spipDebian SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html 8.7 High -
spipDebian SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as... 9.8 Critical -
spipDebian SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as... 9.8 Critical -
spipDebian SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite 7.7 High -
spipDebian action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability. 3.5 Low -
spipDebian SPIP < 4.4.14 Remote Code Execution via nginx 9.2 Critical -
spipDebian SPIP < 4.4.14 Remote Code Execution via Private Space 8.7 High -
spipDebian SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator... 6.7 Medium -
spipDebian SPIP < 4.4.10 Authentication Bypass via PHP Type Juggling 8.7 High -
spipDebian SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tags 8.7 High -
spipDebian SPIP < 4.4.9 Insecure Deserialization 9.2 Critical -
spipDebian SPIP < 4.4.9 Cross-Site Scripting in Private Area (Incomplete Fix) 4.8 Medium -
spipDebian SPIP < 4.4.9 Stored Cross-Site Scripting via Syndicated Sites 5.1 Medium -
spipDebian SPIP < 4.4.9 Blind Server-Side Request Forgery via Syndicated Sites 5.3 Medium -
spipDebian SPIP < 4.4.8 Cross-Site Scripting via Iframe Tags in Private Area 5.1 Medium -
spipDebian SPIP < 4.4.8 Cross-Site Scripting in Public Area 8.6 High -
spipDebian SPIP < 4.4.5 Open Redirect via Login Form 5.1 Medium -
spipDebian SPIP < 4.3.6 Authorization Bypass Leading to Content Disclosure 5.3 Medium -
spipDebian SPIP < 4.3.6 Cross-Site Scripting in Private Area 4.8 Medium -
spipDebian SPIP < 4.2.15 Cross-Site Scripting via Code Tags 4.8 Medium -
spipDebian Spip 4.1.10 Admin Account Spoofing via Malicious SVG Upload 4.8 Medium -
spipDebian SPIP Bigup Multipart File Upload OS Command Injection 9.8 Critical -
spipDebian SPIP porte_plume Plugin Arbitrary PHP Execution 9.8 Critical -
spipDebian SPIP before 4.1.14 and 4.2.x before 4.2.8 allows XSS via the name of an uploaded file. This is... 6.1 Medium -
spipDebian ecrire/public/assembler.php in SPIP before 4.1.3 and 4.2.x before 4.2.7 allows XSS because input... 6.1 Medium -
spipDebian spip - security update No score -
spipDebian spip - regression update No score -
spipDebian SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because... 9.8 Critical -
spipDebian SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups... 9.8 Critical -
spipDebian RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute arbitrary code via... 8.8 High -
spipDebian spip - security update No score -
spipDebian SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about... 5.3 Medium -
spipDebian SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary... 8.8 High -
spipDebian SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability,... 8.8 High -
spipDebian SPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public... 8.8 High -
spipDebian SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces... 5.4 Medium -
spipDebian SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the... 5.4 Medium -
spipDebian spip - security update No score -
spipDebian spip - security update No score -
spipDebian Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection... 8.8 High -
spipDebian A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP... 8.8 High -
spipDebian Multiple cross-site scripting (XSS) vulnerabilities in the component /spip.php of Spip Web... 6.1 Medium -
spipDebian Improper Input Validation in SPIP 9.8 Critical -
spipDebian _core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject... 6.5 Medium -
spipDebian SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published... 6.5 Medium -
spipDebian SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages. 6.1 Medium - Show olderLoading…