Skip to content
Spip vulnerabilities
Newest
-
spip
SPIP before 4.4.29 Authenticated SQL Injection via where Parameter
CVE-2026-122032
7.1 High
-
spip
SPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_url
CVE-2026-109378
Fix available
5.3 Medium
-
spip crayons plugin
SPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE
CVE-2026-104070
9.3 Critical
-
spip
SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection
CVE-2026-72710
Fix available
9.3 Critical
-
spip
SPIP < 4.4.18 Missing Authorization via ecrire/action/
CVE-2026-72709
Fix available
9.3 Critical
-
spip
SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html
CVE-2026-72708
Public exploitFix available
8.7 High
-
spip
SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as...
CVE-2026-77806
Public exploitFix available
9.8 Critical
-
spip
SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as...
CVE-2026-77647
Public exploitFix available
9.8 Critical
-
spip
SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite
CVE-2026-66738
Fix available
7.7 High
-
spip
action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.
CVE-2026-48832
Fix available
3.5 Low
-
open ises tickets
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php
CVE-2026-48249
8.2 High
-
open ises tickets
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php
CVE-2026-48248
8.2 High
-
open ises tickets
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php
CVE-2026-48247
8.2 High
-
open ises tickets
Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php
CVE-2026-48246
8.2 High
-
open ises tickets
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php
CVE-2026-48245
6.9 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php
CVE-2026-48244
6.9 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php
CVE-2026-48243
6.9 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php
CVE-2026-48242
9.2 Critical
-
open ises tickets
Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php
CVE-2026-48241
9.2 Critical
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters
CVE-2026-48240
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter
CVE-2026-48239
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter
CVE-2026-48238
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters
CVE-2026-48237
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters
CVE-2026-48236
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data
CVE-2026-48235
8.8 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters
CVE-2026-48234
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter
CVE-2026-48233
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter
CVE-2026-48232
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters
CVE-2026-48231
7.1 High
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters
CVE-2026-48230
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter
CVE-2026-48229
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters
CVE-2026-48228
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters
CVE-2026-48227
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters
CVE-2026-48226
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter
CVE-2026-48225
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter
CVE-2026-48224
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter
CVE-2026-48223
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str Parameter
CVE-2026-48222
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str Parameter
CVE-2026-48221
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics205.php frm_add_str Parameter
CVE-2026-48220
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via ics202.php frm_add_str Parameter
CVE-2026-48219
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via icons/buttons/landb.php frm_name and frm_id Parameters
CVE-2026-48218
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via delete_module.php Multiple POST Parameters
CVE-2026-48217
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via db_loader.php Multiple POST Parameters
CVE-2026-48216
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via circle.php frm_id Parameter
CVE-2026-48215
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id Parameter
CVE-2026-48214
5.1 Medium
-
open ises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via add.php ticket_id Parameter
CVE-2026-48213
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via search.php frm_query Parameter
CVE-2026-35016
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via do_unit_mail.php the_ticket Parameter
CVE-2026-35015
5.1 Medium
-
openises tickets
Open ISES Tickets < 3.44.2 Reflected XSS via routes_nm.php ticket_id Parameter
CVE-2026-35014
5.1 Medium
- Show olderLoading…