Skip to content
OpenAdvisories
Unscored DSA-3518-1 2 CVEs

spip - security update

Published Mar 16, 2016 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 7 spip 2.1.17-1+deb7u5
Debian · 8 spip 3.0.17-2+deb8u2

Vulnerabilities 2

  • Unscored —

    SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP co…

  • Unscored —

    The encoder_contexte_ajax function in ecrire/inc/filtres.php in SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x …