Lucene search
Veracode Vulnerability DatabaseVERACODE:39758HistoryMar 13, 2023 - 5:57 a.m.
Remote Code Execution (RCE)
2023-03-1305:57:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
29
spip
remote code execution
form values
attacker
malicious code
EPSS
0.974
Percentile
99.9%
SPIP is vulnerable to Remote Code Execution (RCE). The vulnerability exists because of the improper sanitization of form values in the public area, allowing an attacker to inject and execute malicious code.
References
packetstormsecurity.com/files/171921/SPIP-Remote-Command-Execution.html
packetstormsecurity.com/files/173044/SPIP-4.2.1-Remote-Code-Execution.html
blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-2-1-SPIP-4-1-8-SPIP-4-0-10-et.html
git.spip.net/spip/spip/commit/5aedf49b89415a4df3eb775eee3801a2b4b88266
git.spip.net/spip/spip/commit/96fbeb38711c6706e62457f2b732a652a04a409d
security-tracker.debian.org/tracker/CVE-2023-27372
www.debian.org/security/2023/dsa-5367
Related
debiancve
debiancve
CVE-2023-27372
2023-02-28 20:15:10
debian
debian
[SECURITY] [DSA 5367-1] spip security update
2023-03-02 06:19:59
[SECURITY] [DLA 3347-2] spip regression update
2023-03-03 23:04:04
githubexploit
githubexploit
Exploit for Vulnerability in Spip
2023-06-25 19:39:37
Exploit for CVE-2023-27372
2023-07-05 14:41:03
Exploit for CVE-2023-27372
2023-09-07 16:17:03
metasploit
metasploit
SPIP form PHP Injection
2023-04-17 17:41:03
SPIP form PHP Injection
2024-08-30 18:37:32
exploitdb
exploitdb
SPIP v4.2.0 - Remote Code Execution (Unauthenticated)
2023-06-20 00:00:00
prion
prion
Remote code execution
2023-02-28 20:15:00
nuclei
nuclei
SPIP - Remote Command Execution
2023-06-21 20:52:22
openvas
openvas
SPIP 3.2.x < 3.2.18, 4.x < 4.0.10, 4.1.x < 4.1.8, 4.2.x < 4.2.1 RCE Vulnerability
2023-03-02 00:00:00
Debian: Security Advisory (DSA-5367-1)
2023-03-03 00:00:00
Debian: Security Advisory (DLA-3347-1)
2023-02-28 00:00:00
zdt
zdt
SPIP Remote Command Execution Exploit
2023-04-18 00:00:00
SPIP v4.2.0 - Remote Code Execution (Unauthenticated) Exploit
2023-06-26 00:00:00
cve
cve
CVE-2023-27372
2023-02-28 20:15:10
osv
osv
spip - security update
2023-03-02 00:00:00
CVE-2023-27372
2023-02-28 20:15:10
spip - security update
2023-02-27 00:00:00
saint
saint
SPIP password reset serialization vulnerability
2023-06-23 00:00:00
SPIP password reset serialization vulnerability
2023-06-23 00:00:00
nvd
nvd
CVE-2023-27372
2023-02-28 20:15:10
nessus
nessus
Debian DSA-5367-1 : spip - security update
2023-03-02 00:00:00
Debian DLA-3347-1 : spip - LTS security update
2023-02-28 00:00:00
cvelist
cvelist
CVE-2023-27372
2023-02-28 00:00:00
packetstorm
packetstorm
SPIP Remote Command Execution
2023-04-18 00:00:00
SPIP 4.2.1 Remote Code Execution
2023-06-21 00:00:00
ubuntucve
ubuntucve
CVE-2023-27372
2023-02-28 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-04-21 18:02:40