ID de Prueba:	1.3.6.1.4.1.25623.1.0.103777
Categoría:	Web application abuses
Título:	SPIP 'connect' Parameter PHP Code Injection Vulnerability
Resumen:	SPIP is prone to a remote PHP code injection vulnerability.
Descripción:	Summary: SPIP is prone to a remote PHP code injection vulnerability. Vulnerability Insight: SPIP contains a flaw that is triggered when input passed via the 'connect' parameter is not properly sanitized before being used. Vulnerability Impact: An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system, other attacks are also possible. Affected Software/OS: SPIP versions prior to 2.0.21, 2.1.16, and 3.0.3 are vulnerable. Other versions may also affected. Solution: Vendor updates are available. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4555 Debian Security Information: DSA-2794 (Google Search) https://www.debian.org/security/2013/dsa-2794 http://www.openwall.com/lists/oss-security/2013/11/10/4 http://www.securitytracker.com/id/1029317 http://secunia.com/advisories/55551 Common Vulnerability Exposure (CVE) ID: CVE-2013-4556 Common Vulnerability Exposure (CVE) ID: CVE-2013-4557
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.