Summary
Detail | |||
---|---|---|---|
Vendor | Spip | First view | 2006-02-02 |
Product | Spip | Last view | 2020-11-23 |
Version | 1.8b6 | Type | Application |
Update | * | ||
Edition | * | ||
Language | * | ||
Sofware Edition | * | ||
Target Software | * | ||
Target Hardware | * | ||
Other | * | ||
CPE Product | cpe:2.3:a:spip:spip |
Activity : Overall
Related : CVE
Date | Alert | Description | |
---|---|---|---|
9.8 | 2020-11-23 | CVE-2020-28984 | prive/formulaires/configurer_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, display, display_navigation, display_outils, imessage, and spip_ecran parameters. |
6.5 | 2019-12-17 | CVE-2019-19830 | _core_/plugins/medias in SPIP 3.2.x before 3.2.7 allows remote authenticated authors to inject content into the database. |
5.3 | 2019-09-17 | CVE-2019-16394 | SPIP before 3.1.11 and 3.2 before 3.2.5 provides different error messages from the password-reminder page depending on whether an e-mail address exists, which might help attackers to enumerate subscribers. |
6.1 | 2019-09-17 | CVE-2019-16393 | SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character. |
6.1 | 2019-09-17 | CVE-2019-16392 | SPIP before 3.1.11 and 3.2 before 3.2.5 allows prive/formulaires/login.php XSS via error messages. |
6.5 | 2019-09-17 | CVE-2019-16391 | SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiser_action.php. |
8.8 | 2019-04-10 | CVE-2019-11071 | SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because var_memotri is mishandled. |
6.1 | 2017-10-22 | CVE-2017-15736 | Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote attackers to inject arbitrary web script or HTML via a crafted string, as demonstrated by a PGP field, related to prive/objets/contenu/auteur.html and ecrire/inc/texte_mini.php. |
7.4 | 2017-01-18 | CVE-2016-7999 | ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server side request forgery (SSRF) attacks via a URL in the var_url parameter in a valider_xml action. |
8.8 | 2017-01-18 | CVE-2016-7998 | The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading an HTML file with a crafted (1) INCLUDE or (2) INCLURE tag and then accessing it with a valider_xml action. |
7.5 | 2017-01-18 | CVE-2016-7982 | Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml action. |
6.1 | 2017-01-18 | CVE-2016-7981 | Cross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the var_url parameter in a valider_xml action. |
8.8 | 2017-01-18 | CVE-2016-7980 | Cross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that execute the XML validator on a local file via a crafted valider_xml request. NOTE: this issue can be combined with CVE-2016-7998 to execute arbitrary PHP code. |
4.3 | 2014-01-30 | CVE-2013-7303 | Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/forms/editer_auteur.php in SPIP before 2.1.25 and 3.0.x before 3.0.13 allow remote attackers to inject arbitrary web script or HTML via the author name field. |
4.3 | 2013-11-17 | CVE-2013-4556 | Cross-site scripting (XSS) vulnerability in the author page (prive/formulaires/editer_auteur.php) in SPIP before 2.1.24 and 3.0.x before 3.0.12 allows remote attackers to inject arbitrary web script or HTML via the url_site parameter. |
6.8 | 2013-11-17 | CVE-2013-4555 | Cross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP before 2.1.24 allows remote attackers to hijack the authentication of arbitrary users for requests that logout the user via unspecified vectors. |
7.5 | 2009-01-02 | CVE-2008-5813 | SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information. |
10 | 2009-01-02 | CVE-2008-5812 | Multiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 have unknown impact and attack vectors. |
5 | 2006-02-02 | CVE-2006-0519 | SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request to inc-messforum.php3, which reveals the path in an error message. |
4.3 | 2006-02-02 | CVE-2006-0518 | Cross-site scripting (XSS) vulnerability in index.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter. |
7.5 | 2006-02-02 | CVE-2006-0517 | Multiple SQL injection vulnerabilities in formulaires/inc-formulaire_forum.php3 in SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id_forum, (2) id_article, or (3) id_breve parameters to forum.php3; (4) unspecified vectors related to "session handling"; and (5) when posting "petitions". |
CWE : Common Weakness Enumeration
% | id | Name |
---|---|---|
35% (5) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
21% (3) | CWE-20 | Improper Input Validation |
14% (2) | CWE-352 | Cross-Site Request Forgery (CSRF) |
7% (1) | CWE-601 | URL Redirection to Untrusted Site ('Open Redirect') |
7% (1) | CWE-200 | Information Exposure |
7% (1) | CWE-89 | Improper Sanitization of Special Elements used in an SQL Command ('... |
7% (1) | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path ... |
Open Source Vulnerability Database (OSVDB)
id | Description |
---|---|
76183 | SPIP CMS Unspecified SQL Injection |
51140 | SPIP inc/rubriques.php ID Parameter SQL Injection |
51137 | SPIP Multiple Unspecified Issues |
22849 | SPIP index.php3 lang Parameter XSS |
22848 | SPIP Session Handling Petition Posting Multiple Unspecified SQL Injection |
22846 | SPIP inc-messforum.php3 Direct Access Path Disclosure |
22845 | SPIP forum.php3 Multiple Parameter SQL Injection |
OpenVAS Exploits
id | Description |
---|---|
2006-03-26 | Name : SPIP < 1.8.2-g SQL Injection and XSS Flaws File : nvt/spip_sql_injection.nasl |
Nessus® Vulnerability Scanner
id | Description |
---|---|
2018-06-15 | Name: The remote Debian host is missing a security-related update. File: debian_DSA-4228.nasl - Type: ACT_GATHER_INFO |
2016-11-03 | Name: The remote Debian host is missing a security update. File: debian_DLA-695.nasl - Type: ACT_GATHER_INFO |
2013-11-21 | Name: The remote Debian host is missing a security-related update. File: debian_DSA-2794.nasl - Type: ACT_GATHER_INFO |
2006-02-25 | Name: The remote web server has a PHP application that is affected by multiple flaws. File: spip_sql_injection.nasl - Type: ACT_GATHER_INFO |