Skip to content
OpenAdvisories
Unscored DLA-695-1 5 CVEs

spip - security update

Published Nov 2, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 7 spip 2.1.17-1+deb7u6

Vulnerabilities 5

  • Unscored —
    CVE-2016-7980 Public exploit

    Cross-site request forgery (CSRF) vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote …

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2016-7981 Scanner template

    Cross-site scripting (XSS) vulnerability in valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to inject…

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2016-7982 Public exploit EPSS 21%

    Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to e…

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2016-7998 Public exploit EPSS 13%

    The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PH…

    spip spip Debian Ubuntu
  • Unscored —
    CVE-2016-7999

    ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server side request forgery (S…

    spip spip Debian Ubuntu