CVE-2019-16391
EUVD-2019-713917.09.2019, 21:15
SPIP before 3.1.11 and 3.2 before 3.2.5 allows authenticated visitors to modify any published content and execute other modifications in the database. This is related to ecrire/inc/meta.php and ecrire/inc/securiser_action.php.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| spip | spip | 𝑥 < 3.1.11 |
| spip | spip | 3.2.0 ≤ 𝑥 < 3.2.5 |
| canonical | ubuntu_linux | 18.04 |
| debian | debian_linux | 8.0 |
| debian | debian_linux | 9.0 |
| debian | debian_linux | 10.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References