Skip to contentSpip vulnerabilities
Newest
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages.CVE-2019-16392Fix available6.1 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a...CVE-2019-16393Fix available6.1 Medium
- spip, canonical ubuntu linux, debian linux +2 moreSPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password...CVE-2019-16394Public exploitFix available5.3 Medium
- spip, debian linux +1 moreSPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary...CVE-2019-11071Fix available8.8 High
- spipCross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to...CVE-2017-15736Fix available6.1 Medium
- spipSPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the...CVE-2017-9736Fix available9.8 Critical
- spipSPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info_plugin...CVE-2016-9998Fix available6.1 Medium
- spipSPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec...CVE-2016-9997Fix available6.1 Medium
- spipCross-site scripting (XSS) vulnerability in ecrire/exec/plonger.php in SPIP 3.1.3 allows remote...CVE-2016-9152Fix available6.1 Medium
- spipecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server...CVE-2016-7999Fix available7.4 High
- spipThe SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users...CVE-2016-7998Public exploitFix availableEPSS 13.3%8.8 High
- spipDirectory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows...CVE-2016-7982Public exploitFix availableEPSS 20.5%7.5 High
- spipCross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and earlier allows...CVE-2016-7981Fix available6.1 Medium
- spipCross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and...CVE-2016-7980Public exploitFix available8.8 High
- spipThe encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x before 2.1.19, 3.0.x...CVE-2016-3154Fix available9.8 Critical
- spip, debian linux +1 moreSPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to...CVE-2016-3153Fix available9.8 Critical
- spipMultiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires...CVE-2013-7303Fix available4.3 Medium
- spipThe Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3...CVE-2013-4557Public exploitFix availableEPSS 25.3%7.5 High
- spipCross-site scripting (XSS) vulnerability in the author page (prive/formulaires/editer_auteur.php)...CVE-2013-4556Fix available4.3 Medium
- spipCross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24...CVE-2013-4555Fix available6.8 Medium
- spipSPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to...CVE-2013-2118Public exploitFix available7.5 High
- spipMultiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x...CVE-2012-4331Fix available10.0 High
- spipMultiple cross-site scripting (XSS) vulnerabilities in SPIP 1.9.x before 1.9.2.o, 2.0.x before 2...CVE-2012-2151Fix available4.3 Medium
- spipSPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire...CVE-2009-3041Public exploitFix available7.5 High
- spipSQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g,...CVE-2008-5813Fix available7.5 High
- spipMultiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before...CVE-2008-5812Fix available10.0 High
- spip** DISPUTED ** PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows...CVE-2007-4525Fix availableDisputed7.5 High
- spipPHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers...CVE-2006-1702Public exploitFix available7.5 High
- spipCross-site scripting (XSS) vulnerability in recherche.php3 in SPIP 1.8.2-g allows remote...CVE-2006-1295Fix available4.3 Medium
- spipSQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote...CVE-2006-0626Public exploitFix available7.5 High
- spipDirectory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote...CVE-2006-0625Public exploitFix available6.4 Medium
- spipSPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain...CVE-2006-0519Fix available5.0 Medium
- spipCross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha...CVE-2006-0518Public exploitFix available4.3 Medium
- spipMultiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e...CVE-2006-0517Fix available7.5 High
- spipCross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to...CVE-2005-4494Fix available2.6 Low