Skip to content
OpenAdvisories

Package · Debian

spip

79 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-77806 Public exploit

    SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in Augus…

    SPIP SPIP spip spip Debian Ubuntu
  • Critical 9.8
    CVE-2026-77647 Public exploit

    SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in Augus…

    SPIP SPIP spip spip Debian Ubuntu
  • Critical 9.8
    CVE-2024-8517 Public exploit EPSS 95%

    SPIP Bigup Multipart File Upload OS Command Injection

    SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.

    SPIP SPIP spip spip Debian Ubuntu
  • Critical 9.8
    CVE-2024-7954 Public exploit EPSS 90%

    SPIP porte_plume Plugin Arbitrary PHP Execution

    The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request.

    SPIP SPIP spip spip Debian Ubuntu
  • Critical 9.8
    CVE-2023-27372 Public exploit EPSS 100%

    SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. …

    spip spip Debian Ubuntu