spip vulnerabilities (Debian)
86 vulnerabilities.
spipDebianSPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a...6.1 MediumspipDebianSPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password...5.3 MediumspipDebianSPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary...8.8 HighspipDebianCross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to...6.1 MediumspipDebianSPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the...9.8 CriticalspipDebianSPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info_plugin...6.1 MediumspipDebianSPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec...6.1 MediumspipDebianCross-site scripting (XSS) vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote...6.1 MediumspipDebianecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server...7.4 HighspipDebianThe SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users...8.8 HighspipDebianDirectory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows...7.5 HighspipDebianCross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and earlier allows...6.1 MediumspipDebianCross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and...8.8 HighspipDebianThe encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x before 2.1.19, 3.0.x...9.8 CriticalspipDebianSPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to...9.8 CriticalspipDebianMultiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires...4.3 MediumspipDebianThe Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3...7.5 HighspipDebianCross-site scripting (XSS) vulnerability in the author page (prive/formulaires/editer_auteur.php)...4.3 MediumspipDebianCross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24...6.8 MediumspipDebianSPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to...7.5 HighspipDebianMultiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x...10.0 HighspipDebianMultiple cross-site scripting (XSS) vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2...4.3 MediumspipDebianspip - severalNo scorespipDebianspip - programming errorNo scorespipDebianSPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire...7.5 HighspipDebianSQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g,...7.5 HighspipDebianMultiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before...10.0 HighspipDebian** DISPUTED ** PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows...7.5 HighspipDebianPHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers...7.5 HighspipDebianCross-site scripting (XSS) vulnerability in recherche.php3 in SPIP 1.8.2-g allows remote...4.3 MediumspipDebianSQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote...7.5 HighspipDebianDirectory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote...6.4 MediumspipDebianSPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain...5.0 MediumspipDebianCross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha...4.3 MediumspipDebianMultiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e...7.5 HighspipDebianCross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to...2.6 Low