contrib.spip.netConfirmation
http://contrib.spip.net/SPIP-3-0-9-2-1-22-2-0-23-corrections-de-bug-et-faille?lang=fr CVE-2013-2118
SPIP CMS < 2.0.23/ 2.1.22/3.0.9 - Privilege Escalation
Record summary
CVE-2013-2118 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSPIP CMS < 2.0.23/ 2.1.22/3.0.9 - Privilege EscalationExploitDB exploitby Gregory DraperiNot analyzed1 file
References
5core.spip.org
http://core.spip.org/projects/spip/repository/revisions/20541 DSA-2694Vendor advisory
http://www.debian.org/security/2013/dsa-2694 [oss-security] 20130527 Re: CVE Request: SPIP privilege escalationmailing list
http://www.openwall.com/lists/oss-security/2013/05/27/2 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2013-2118