Browse CVEs

MEDIUM 6.1 CVE-2023-53900 Spip 4.1.10 contains a file upload vulnerability that allows attackers to upload malicious SVG files with embedded external links. Attackers can tric… Spip No fix yet Fix from $1,6002025-12-16 MEDIUM 6.3 CVE-2024-53619 An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading … Spip No fix yet Fix from $1,6002024-11-26 HIGH 7.5 CVE-2013-2118EPSS 9% SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vec… Spip Mitigation only Fix from $1,9502013-07-09 HIGH 10.0 CVE-2012-4331 Multiple unspecified vulnerabilities in SPIP before 1.9.2.o, 2.0.x before 2.0.18, and 2.1.x before 2.1.13 have unknown impact and attack vectors that… Spip No fix yet Fix from $1,9502012-08-14 HIGH 7.5 CVE-2007-4525 PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squel… Spip Mitigation only Fix from $1,9502007-08-25 HIGH 7.5 CVE-2006-1702 PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the url p… Spip No fix yet Fix from $1,9502006-04-11 HIGH 7.5 CVE-2006-0626 SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file … Spip No fix yet Fix from $1,9502006-02-09 MEDIUM 6.4 CVE-2006-0625 Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." seq… Spip No fix yet Fix from $1,6002006-02-09