SPIP 3.1.x prior to 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote malicious user to cause remote code execution.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
spip spip 3.1.4 |
||
spip spip 3.1.5 |
||
spip spip 3.1.2 |
||
spip spip 3.1.3 |
||
spip spip 3.1.0 |
||
spip spip 3.2 |
||
spip spip 3.1.1 |
||
spip spip 3.2.0 |