SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSpip
APPSpip4.3.04.3.14.0.0 – 4.1.18 (bez)4.2.0 – 4.2.15
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth BypassCommand Injection
Related vulnerabilities
CVE-2026-27475CRITICAL9.2PL ✓ten sam produkt
SPIP — Insecure Deserialization umożliwiająca RCE w obszarze publicznym
CVE-2023-27372CRITICAL9.8ten sam produkt
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mis...
CVE-2023-24258CRITICAL9.8ten sam produkt
SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This ...
CVE-2020-28984CRITICAL9.8ten sam produkt
prive/formulaires/configurer_preferences.php in SPIP before 3.2.8 does not properly validate the couleur, disp...
CVE-2017-9736CRITICAL9.8ten sam produkt
SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allo...