Debian/spip: unknown

Directory traversal vulnerability in Spip_RSS.PHP in SPIP 1.8.2g and earlier allows remote attackers to read or include arbitrary files via ".." sequences in the GLOBALS[type_urls] parameter, which co

Action: Upgrade spip to 2.0.6-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2006-0625#Debian:14/spip
• https://security-tracker.debian.org/tracker/CVE-2006-0625

published 2006-02-09T18:06:00Z · modified 2026-10-22T23:47:31.028820207Z · JSON