Approved changes feed: RSS · Atom

cpe:2.3:a:spip:spip:1.9:alpha2:*:*:*:*:*:*

part: a version: 1.9 update: alpha2

VendorSpip (07f60ada-7acf-5eb6-a7f1-b34680eac704)
ProductSpip (f4205da0-8b50-5b7e-bb5d-d003199a6313)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/spip purl2cpe 2026-06-01 10:16:58.230311
pkg:deb/ubuntu/spip purl2cpe 2026-06-01 10:16:58.230313
pkg:github/spip/spip purl2cpe 2026-06-01 10:16:58.230314

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3041 vulnerable 2026-06-08 04:51:32.033250 Details available
SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009.
Published: 2009-09-01T18:04:00.000Z
Updated: 2024-08-07T06:14:56.453Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.