Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

spip spip 2.1.17 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-4555
Cross-site request forgery (CSRF) vulnerability in ecrire/action/logout.php in SPIP prior to 2.1.24 allows remote malicious users to hijack the authentication of arbitrary users for requests that logout the user via unspecified vectors.
Spip Spip 2.1.16Spip Spip 2.1.15Spip Spip 2.0.9Spip Spip 2.0.8Spip Spip 2.0.20Spip Spip 2.0.2Spip Spip 2.0.13Spip Spip 2.0.12Spip Spip 2.1.8Spip Spip 2.1.7Spip Spip 2.1.2Spip Spip 2.1.19Spip Spip 2.1.12Spip Spip 2.1.11Spip Spip 2.0.5Spip Spip 2.0.4Spip Spip 2.0.17Spip Spip 2.0.16Spip Spip 2.0.1Spip Spip 2.0.0Spip Spip 2.1.5Spip Spip 2.1.22
NA
CVE-2013-2118
SPIP 3.0.x prior to 3.0.9, 2.1.x prior to 2.1.22, and 2.0.x prior to 2.0.23 allows remote malicious users to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php.
Spip Spip 3.0.1Spip Spip 3.0.2Spip Spip 3.0.3Spip Spip 3.0.4Spip Spip 3.0.0Spip Spip 3.0.5Spip Spip 3.0.7Spip Spip 3.0.6Spip Spip 3.0.8Spip Spip 2.1.1Spip Spip 2.1.2Spip Spip 2.1.3Spip Spip 2.1.17Spip Spip 2.1.18Spip Spip 2.1.19Spip Spip 2.1.20Spip Spip 2.1.9Spip Spip 2.1.10Spip Spip 2.1.11Spip Spip 2.1.12Spip Spip 2.1.5Spip Spip 2.1.7
NA
CVE-2013-7303
Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/forms/editer_auteur.php in SPIP prior to 2.1.25 and 3.0.x prior to 3.0.13 allow remote malicious users to inject arbitrary web script or HTML via the author name f...
Spip Spip 3.0.3Spip Spip 3.0.4Spip Spip 2.1.23Spip Spip 2.1.22Spip Spip 2.1.16Spip Spip 2.1.15Spip Spip 2.0.9Spip Spip 2.0.8Spip Spip 2.0.21Spip Spip 2.0.20Spip Spip 2.0.14Spip Spip 2.0.13Spip Spip 3.0.10Spip Spip 3.0.11Spip Spip 3.0.2Spip Spip 3.0.9Spip SpipSpip Spip 2.1.18Spip Spip 2.1.17Spip Spip 2.1.1Spip Spip 2.1Spip Spip 2.0.3
NA
CVE-2013-4556
Cross-site scripting (XSS) vulnerability in the author page (prive/formulaires/editer_auteur.php) in SPIP prior to 2.1.24 and 3.0.x prior to 3.0.12 allows remote malicious users to inject arbitrary web script or HTML via the url_site parameter.
Spip Spip 3.0.3Spip Spip 3.0.4Spip Spip 2.1.21Spip Spip 2.1.20Spip Spip 2.1.14Spip Spip 2.1.13Spip Spip 2.0.7Spip Spip 2.0.6Spip Spip 2.0.19Spip Spip 2.0.18Spip Spip 2.0.11Spip Spip 3.0.0Spip Spip 3.0.7Spip Spip 3.0.8Spip Spip 2.1.18Spip Spip 2.1.17Spip Spip 2.1.10Spip Spip 2.1.1Spip Spip 2.0.3Spip Spip 2.0.22Spip Spip 2.0.15Spip Spip 2.0.14
9.8
CVSSv3
CVE-2016-3154
The encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x prior to 2.1.19, 3.0.x prior to 3.0.22, and 3.1.x prior to 3.1.1 allows remote malicious users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object.
Spip Spip 3.0.1Spip Spip 3.0.0Spip Spip 3.0.9Spip Spip 3.0.8Spip Spip 2.1.7Spip Spip 2.1.6Spip Spip 2.1.5Spip Spip 2.1.4Spip Spip 2.0.9Spip Spip 2.0.8Spip Spip 2.0.7Spip Spip 2.0.6Spip Spip 2.0.14Spip Spip 2.0.13Spip Spip 2.0.12Spip Spip 2.0.11Spip Spip 3.1.0Spip Spip 3.0.14Spip Spip 3.0.15Spip Spip 3.0.16Spip Spip 3.0.17Spip Spip 2.1.17
9.8
CVSSv3
CVE-2016-3153
SPIP 2.x prior to 2.1.19, 3.0.x prior to 3.0.22, and 3.1.x prior to 3.1.1 allows remote malicious users to execute arbitrary PHP code by adding content, related to the filtrer_entites function.
Debian Debian Linux 7.0Debian Debian Linux 8.0Spip Spip 3.0.0Spip Spip 3.0.9Spip Spip 3.0.8Spip Spip 3.0.7Spip Spip 2.1.6Spip Spip 2.1.5Spip Spip 2.1.4Spip Spip 2.1.3Spip Spip 2.0.8Spip Spip 3.1.0Spip Spip 3.0.20Spip Spip 3.0.2Spip Spip 3.0.14Spip Spip 3.0.15Spip Spip 3.0.16Spip Spip 3.0.17Spip Spip 2.1.15Spip Spip 2.1.14Spip Spip 2.1.13Spip Spip 2.1.12
NA
CVE-2013-4557
The Security Screen (_core_/securite/ecran_securite.php) prior to 1.1.8 for SPIP, as used in SPIP 3.0.x prior to 3.0.12, allows remote malicious users to execute arbitrary PHP via the connect parameter.
Spip Spip 3.0.0Spip Spip 3.0.1Spip Spip 3.0.8Spip Spip 3.0.9Spip Spip 3.0.4Spip Spip 3.0.5Spip Spip 3.0.2Spip Spip 3.0.3Spip Spip 3.0.10Spip Spip 3.0.11Spip Spip 3.0.6Spip Spip 3.0.7
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook