Debian/spip: unknown
The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter.
Action: Upgrade spip to 2.1.24-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.24-1 | - |
Fixed versions
| 2.1.24-1 |
Sources
published · modified · JSON