spip vulnerabilities (Ubuntu)
62 vulnerabilities.
-
spipUbuntu odt2spip < 4.4.0 OS Command Injection via Document Filename 8.7 High -
spipUbuntu SPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_url 5.3 Medium -
spipUbuntu SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection 9.3 Critical -
spipUbuntu SPIP < 4.4.18 Missing Authorization via ecrire/action/ 9.3 Critical -
spipUbuntu SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html 8.7 High -
spipUbuntu SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as... 9.8 Critical -
spipUbuntu SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as... 9.8 Critical -
spipUbuntu SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite 7.7 High -
spipUbuntu action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability. 3.5 Low -
spipUbuntu SPIP < 4.4.14 Remote Code Execution via nginx 9.2 Critical -
spipUbuntu SPIP < 4.4.14 Remote Code Execution via Private Space 8.7 High -
spipUbuntu SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator... 6.7 Medium -
spipUbuntu SPIP < 4.4.10 Authentication Bypass via PHP Type Juggling 8.7 High -
spipUbuntu SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tags 8.7 High -
spipUbuntu SPIP < 4.4.9 Insecure Deserialization 9.2 Critical -
spipUbuntu SPIP < 4.4.9 Cross-Site Scripting in Private Area (Incomplete Fix) 4.8 Medium -
spipUbuntu SPIP < 4.4.9 Stored Cross-Site Scripting via Syndicated Sites 5.1 Medium -
spipUbuntu SPIP < 4.4.9 Blind Server-Side Request Forgery via Syndicated Sites 5.3 Medium -
spipUbuntu SPIP < 4.4.8 Cross-Site Scripting via Iframe Tags in Private Area 5.1 Medium -
spipUbuntu SPIP < 4.4.8 Cross-Site Scripting in Public Area 8.6 High -
spipUbuntu SPIP < 4.4.5 Open Redirect via Login Form 5.1 Medium -
spipUbuntu SPIP < 4.3.6 Authorization Bypass Leading to Content Disclosure 5.3 Medium -
spipUbuntu SPIP < 4.3.6 Cross-Site Scripting in Private Area 4.8 Medium -
spipUbuntu SPIP < 4.2.15 Cross-Site Scripting via Code Tags 4.8 Medium -
spipUbuntu Spip 4.1.10 Admin Account Spoofing via Malicious SVG Upload 4.8 Medium -
spipUbuntu A cross-site scripting (XSS) vulnerability in the Article module of SPIP v4.3.3 allows... 4.8 Medium -
spipUbuntu An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3... 6.3 Medium -
spipUbuntu SPIP Bigup Multipart File Upload OS Command Injection 9.8 Critical -
spipUbuntu SPIP porte_plume Plugin Arbitrary PHP Execution 9.8 Critical -
spipUbuntu SPIP before 4.1.14 and 4.2.x before 4.2.8 allows XSS via the name of an uploaded file. This is... 6.1 Medium -
spipUbuntu ecrire/public/assembler.php in SPIP before 4.1.3 and 4.2.x before 4.2.7 allows XSS because input... 6.1 Medium -
spipUbuntu SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because... 9.8 Critical -
spipUbuntu SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups... 9.8 Critical -
spipUbuntu RCE in SPIP 3.1.13 through 4.1.2 allows remote authenticated users to execute arbitrary code via... 8.8 High -
spipUbuntu SPIP before 3.2.14 and 4.x before 4.0.5 allows unauthenticated access to information about... 5.3 Medium -
spipUbuntu SPIP before 3.2.14 and 4.x before 4.0.5 allows remote authenticated editors to execute arbitrary... 8.8 High -
spipUbuntu Cross-site Scripting in svg-sanitizer 6.2 Medium -
spipUbuntu SPIP 4.0.0 is affected by a remote command execution vulnerability. To exploit the vulnerability,... 8.8 High -
spipUbuntu SPIP 4.0.0 is affected by a Cross Site Request Forgery (CSRF) vulnerability in ecrire/public... 8.8 High -
spipUbuntu SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability in ecrire/public/interfaces... 5.4 Medium -
spipUbuntu SPIP 4.0.0 is affected by a Cross Site Scripting (XSS) vulnerability. To exploit the... 5.4 Medium -
spipUbuntu Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection... 8.8 High -
spipUbuntu A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP... 8.8 High -
spipUbuntu Multiple cross-site scripting (XSS) vulnerabilities in the component /spip.php of Spip Web... 6.1 Medium -
spipUbuntu Improper Input Validation in SPIP 9.8 Critical -
spipUbuntu _core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject... 6.5 Medium -
spipUbuntu SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published... 6.5 Medium -
spipUbuntu SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages. 6.1 Medium -
spipUbuntu SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a... 6.1 Medium -
spipUbuntu SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password... 5.3 Medium - Show olderLoading…