GCVE - cpe:2.3:a:spip:spip:1.8.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:spip:spip:1.8.3:*:*:*:*:*:*:*

part: a version: 1.8.3 update: *

Vendor	Spip (`07f60ada-7acf-5eb6-a7f1-b34680eac704`)
Product	Spip (`f4205da0-8b50-5b7e-bb5d-d003199a6313`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/spip`	purl2cpe	2026-06-01 10:16:58.199446
`pkg:deb/ubuntu/spip`	purl2cpe	2026-06-01 10:16:58.199448
`pkg:github/spip/spip`	purl2cpe	2026-06-01 10:16:58.199449

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-5813`	vulnerable	2026-06-08 04:50:53.242936	Details available SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. NOTE: some of these details are obtained from third party information. Published: 2009-01-02T18:00:00.000Z Updated: 2024-08-07T11:04:44.586Z Open on db.gcve.eu Reference links http://secunia.com/advisories/33307 https://exchange.xforce.ibmcloud.com/vulnerabilities/47626 http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2 https://exchange.xforce.ibmcloud.com/vulnerabilities/47695 http://www.securityfocus.com/bid/33021	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5812`	vulnerable	2026-06-08 04:50:53.233158	Details available Multiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 have unknown impact and attack vectors. Published: 2009-01-02T18:00:00.000Z Updated: 2024-08-07T11:04:44.590Z Open on db.gcve.eu Reference links http://secunia.com/advisories/33307 http://www.spip-contrib.net/SPIP-1-8-3b-1-9-2g-2-2 https://exchange.xforce.ibmcloud.com/vulnerabilities/47695 http://www.securityfocus.com/bid/33061	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1702`	vulnerable	2026-06-08 04:48:57.851145	Details available PHP remote file inclusion vulnerability in spip_login.php3 in SPIP 1.8.3 allows remote attackers to execute arbitrary PHP code via a URL in the url parameter. Published: 2006-04-11T10:00:00.000Z Updated: 2024-08-07T17:19:49.504Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/17423 http://www.securityfocus.com/archive/1/430443/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/25711	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.