Approved changes feed: RSS · Atom
cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Spip (07f60ada-7acf-5eb6-a7f1-b34680eac704) |
|---|---|
| Product | Spip (f4205da0-8b50-5b7e-bb5d-d003199a6313) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/spip |
purl2cpe | 2026-06-01 10:16:58.186724 |
pkg:deb/ubuntu/spip |
purl2cpe | 2026-06-01 10:16:58.186725 |
pkg:github/spip/spip |
purl2cpe | 2026-06-01 10:16:58.186727 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8430 |
vulnerable | 2026-06-08 08:08:58.367917 |
SPIP < 4.4.14 Remote Code Execution via nginx
HIGH (8.1)
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certain nginx configurations, allowing attackers to execute arbitrary code in the context of the web server. Attackers can exploit this vulnerability through specific nginx configuration scenarios to achieve code execution, and this issue is not mitigated by the SPIP security screen.
Published: 2026-05-12T18:43:25.046Z
Updated: 2026-07-14T22:03:57.673Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8429 |
vulnerable | 2026-06-08 08:08:58.367416 |
SPIP < 4.4.14 Remote Code Execution via Private Space
HIGH (8.8)
SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server. Attackers can exploit this vulnerability to achieve code execution that bypasses the SPIP security screen protections.
Published: 2026-05-12T18:32:17.431Z
Updated: 2026-07-14T22:03:57.008Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48832 |
vulnerable | 2026-06-08 08:05:12.325717 |
Details available
LOW (3.5)
action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability.
Published: 2026-05-24T22:36:35.529Z
Updated: 2026-05-26T15:20:35.045Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33549 |
vulnerable | 2026-06-08 07:59:10.364849 |
Details available
MEDIUM (6.7)
SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of STATUT mishandling.
Published: 2026-03-22T02:03:47.629Z
Updated: 2026-04-02T17:58:46.498Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27747 |
vulnerable | 2026-06-08 07:55:13.714221 |
SPIP interface_traduction_objets < 2.2.2 Authenticated SQL Injection
HIGH (8.8)
The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php. When handling translation requests, the plugin reads the id_parent parameter from user-supplied input and concatenates it directly into a SQL WHERE clause in a call to sql_getfetsel() without input validation or parameterization. An authenticated attacker with editor-level privileges can inject crafted SQL expressions into the id_parent parameter to manipulate the backend query. Successful exploitation can result in disclosure or modification of database contents and may lead to denial of service depending on the database configuration and privileges.
Published: 2026-02-25T03:07:44.532Z
Updated: 2026-03-05T01:31:28.148Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27746 |
vulnerable | 2026-06-08 07:55:13.713429 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27745 |
vulnerable | 2026-06-08 07:55:13.711042 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27743 |
vulnerable | 2026-06-08 07:53:22.928864 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27475 |
vulnerable | 2026-06-08 07:53:22.355722 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27474 |
vulnerable | 2026-06-08 07:53:22.355272 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27473 |
vulnerable | 2026-06-08 07:53:22.354912 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-27472 |
vulnerable | 2026-06-08 07:53:22.354535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26345 |
vulnerable | 2026-06-08 07:53:21.581393 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-26223 |
vulnerable | 2026-06-08 07:53:21.430433 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22206 |
vulnerable | 2026-06-08 07:49:17.719523 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22205 |
vulnerable | 2026-06-08 07:49:17.718215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71244 |
vulnerable | 2026-06-08 07:43:17.770529 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71242 |
vulnerable | 2026-06-08 07:43:17.768280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71241 |
vulnerable | 2026-06-08 07:43:17.767901 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71240 |
vulnerable | 2026-06-08 07:43:17.767448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8517 |
vulnerable | 2026-06-08 07:00:24.824807 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7954 |
vulnerable | 2026-06-08 06:58:24.008447 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-23659 |
vulnerable | 2026-06-08 06:29:40.125438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-53900 |
vulnerable | 2026-06-08 06:19:39.968094 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52322 |
vulnerable | 2026-06-08 06:17:54.801438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27372 |
vulnerable | 2026-06-08 05:57:40.994876 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24258 |
vulnerable | 2026-06-08 05:56:05.276363 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-37155 |
vulnerable | 2026-06-08 05:47:11.706678 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28961 |
vulnerable | 2026-06-08 05:42:46.108516 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28960 |
vulnerable | 2026-06-08 05:42:46.108148 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28959 |
vulnerable | 2026-06-08 05:42:46.107685 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26847 |
vulnerable | 2026-06-08 05:41:53.468310 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26846 |
vulnerable | 2026-06-08 05:41:53.467748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-28984 |
vulnerable | 2026-06-08 05:23:56.713994 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19830 |
vulnerable | 2026-06-08 05:13:23.838065 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16394 |
vulnerable | 2026-06-08 05:13:08.407470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16393 |
vulnerable | 2026-06-08 05:13:08.406927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16392 |
vulnerable | 2026-06-08 05:13:08.406303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16391 |
vulnerable | 2026-06-08 05:13:08.405466 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11071 |
vulnerable | 2026-06-08 05:12:34.978712 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15736 |
vulnerable | 2026-06-08 05:08:59.534351 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7999 |
vulnerable | 2026-06-08 05:08:13.664533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7998 |
vulnerable | 2026-06-08 05:08:13.664116 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7982 |
vulnerable | 2026-06-08 05:08:13.645300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7981 |
vulnerable | 2026-06-08 05:08:13.644865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-7980 |
vulnerable | 2026-06-08 05:08:13.644125 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7303 |
vulnerable | 2026-06-08 05:05:09.563237 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4556 |
vulnerable | 2026-06-08 05:04:48.233737 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4555 |
vulnerable | 2026-06-08 05:04:48.210193 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0519 |
vulnerable | 2026-06-08 04:48:54.244448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0518 |
vulnerable | 2026-06-08 04:48:54.244145 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-0517 |
vulnerable | 2026-06-08 04:48:54.243750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.