Approved changes feed: RSS · Atom
cpe:2.3:a:spip:saisies:*:*:*:*:*:spip:*:*
part: a version: * update: *
| Vendor | Spip (07f60ada-7acf-5eb6-a7f1-b34680eac704) |
|---|---|
| Product | Saisies (42441b8c-73cd-54d7-9d00-7adbde5065f3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | spip |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-22206 |
vulnerable | 2026-06-08 07:49:17.719561 |
SPIP < 4.4.10 SQL Injection RCE via Union & PHP Tags
HIGH (8.8)
SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.
Published: 2026-02-26T20:17:58.443Z
Updated: 2026-03-05T01:30:18.401Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22205 |
vulnerable | 2026-06-08 07:49:17.719103 |
SPIP < 4.4.10 Authentication Bypass via PHP Type Juggling
HIGH (7.5)
SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons in authentication logic to bypass login verification and retrieve sensitive internal data.
Published: 2026-02-26T20:18:14.748Z
Updated: 2026-05-25T23:41:36.560Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-71243 |
vulnerable | 2026-06-08 07:43:17.770116 |
SPIP Saisies Plugin < 5.11.1 Remote Code Execution
CRITICAL (9.8)
The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 contains a critical Remote Code Execution (RCE) vulnerability. An attacker can exploit this vulnerability to execute arbitrary code on the server. Users should immediately update to version 5.11.1 or later.
Published: 2026-02-19T14:58:15.425Z
Updated: 2026-03-05T01:29:58.933Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.