tocsin

Debian/spip: unknown

SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct unauthorized activi

Action: Upgrade spip to 2.0.9-1 or later.

Affected

introducedfixedlast affected
02.0.9-1-

Fixed versions

2.0.9-1

Sources

published · modified · JSON