CVE-2013-2118 - SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php

Back Back to CVE browser

HIGH

SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php

Published Jul 9, 2013

7.5

HIGH

CVSS 2.0

EPSS 8.98%

Description

SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://contrib.spip.net/SPIP-3-0-9-2-1-22-2-0-23-corrections-de-bug-et-faille?lang=fr
x_refsource_CONFIRMVendor Advisory
http://core.spip.org/projects/spip/repository/revisions/20541
x_refsource_MISC
http://www.debian.org/security/2013/dsa-2694
vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2013/05/27/2
mailing-listx_refsource_MLIST

Link	Providers	Tags
http://contrib.spip.net/SPIP-3-0-9-2-1-22-2-0-23-corrections-de-bug-et-faille?lang=fr		x_refsource_CONFIRMVendor Advisory
http://core.spip.org/projects/spip/repository/revisions/20541		x_refsource_MISC
http://www.debian.org/security/2013/dsa-2694		vendor-advisoryx_refsource_DEBIAN
http://www.openwall.com/lists/oss-security/2013/05/27/2		mailing-listx_refsource_MLIST