Skip to content
OpenAdvisories

Package · Debian

spip

79 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-72708 Public exploit

    SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html

    SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability in the SQL escaping layer that allows unauthenticated attackers to inject arbitrary SQL by supplying a crafted annee parameter value matching a word character followed by an open…

    SPIP SPIP spip spip Debian Ubuntu
  • High 8.8
    CVE-2026-66738 Public exploit

    SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite

    SPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations. The navigation menu endpoint improperly handles array-typed user input, which bypasses input sanitization and allows the value to break out of an internal quoted string…

    SPIP SPIP spip spip Debian Ubuntu
  • High 8.1
    CVE-2026-27475 Public exploit

    SPIP < 4.4.9 Insecure Deserialization

    SPIP before 4.4.9 allows Insecure Deserialization in the public area through the table_valeur filter and the DATA iterator, which accept serialized data. An attacker who can place malicious serialized content (a pre-condition requiring prior access or another…

    SPIP SPIP spip spip Debian Ubuntu