CVE-2016-9997
17.12.2016, 03:59
SPIP 3.1.x suffers from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/puce_statut.php involving the `$id` parameter, as demonstrated by a /ecrire/?exec=puce_statut URL.
| Vendor | Product | Version |
|---|---|---|
| spip | spip | 3.1.0 |
| spip | spip | 3.1.0:alpha |
| spip | spip | 3.1.0:beta |
| spip | spip | 3.1.0:rc |
| spip | spip | 3.1.0:rc2 |
| spip | spip | 3.1.0:rc3 |
| spip | spip | 3.1.1 |
| spip | spip | 3.1.2 |
| spip | spip | 3.1.3 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| spip |
|