Approved changes feed: RSS · Atom

cpe:2.3:a:spip:spip:1.8.2g:*:*:*:*:*:*:*

part: a version: 1.8.2g update: *

VendorSpip (07f60ada-7acf-5eb6-a7f1-b34680eac704)
ProductSpip (f4205da0-8b50-5b7e-bb5d-d003199a6313)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/spip purl2cpe 2026-06-01 10:16:58.197842
pkg:deb/ubuntu/spip purl2cpe 2026-06-01 10:16:58.197844
pkg:github/spip/spip purl2cpe 2026-06-01 10:16:58.197846

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1295 vulnerable 2026-06-08 04:48:56.847840 Details available
Cross-site scripting (XSS) vulnerability in recherche.php3 in SPIP 1.8.2-g allows remote attackers to inject arbitrary web script or HTML via the recherche parameter.
Published: 2006-03-19T23:00:00.000Z
Updated: 2024-08-07T17:03:29.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0626 vulnerable 2026-06-08 04:48:54.702247 Details available
SQL injection vulnerability in spip_acces_doc.php3 in SPIP 1.8.2g and earlier allows remote attackers to execute arbitrary SQL commands via the file parameter.
Published: 2006-02-09T18:00:00.000Z
Updated: 2024-08-07T16:41:28.992Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0625 vulnerable 2026-06-08 04:48:54.701835 Details available
Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALS[type_urls] parameter, which could then be used to execute arbitrary code via resultant direct static code injection in the file parameter to spip_acces_doc.php3.
Published: 2006-02-09T18:00:00.000Z
Updated: 2024-08-07T16:41:29.137Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.