Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2008-5813

Disclosure Date: January 02, 2009 (last updated October 04, 2023)
SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information.
0
0
Attacker Value
Unknown

CVE-2008-5812

Disclosure Date: January 02, 2009 (last updated October 04, 2023)
Multiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 have unknown impact and attack vectors.
0
0
Attacker Value
Unknown

CVE-2006-1702

Disclosure Date: April 11, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter.
0
0
Attacker Value
Unknown

CVE-2006-1295

Disclosure Date: March 19, 2006 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in recherche.php3 in SPIP 1.8.2-g allows remote attackers to inject arbitrary web script or HTML via the recherche parameter.
0
0
Attacker Value
Unknown

CVE-2006-0626

Disclosure Date: February 09, 2006 (last updated February 22, 2025)
SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter.
0
0
Attacker Value
Unknown

CVE-2006-0625

Disclosure Date: February 09, 2006 (last updated February 22, 2025)
Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALS[type_urls] parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file parameter to spip_acces_doc.php3.
0
0
Attacker Value
Unknown

CVE-2005-4494

Disclosure Date: December 22, 2005 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) spip_login.php3 and (2) spip_pass.php3.
0
0