Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-2118. PoCs published by Gregory Draperi.
AI-analyzed exploit summary This exploit leverages a privilege escalation vulnerability in SPIP CMS to create an administrator account without authentication. It sends crafted requests to the target system, exploiting improper access controls to register a new admin user, with credentials sent via email.
Description
SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php.
Exploits (1)
This exploit leverages a privilege escalation vulnerability in SPIP CMS to create an administrator account without authentication. It sends crafted requests to the target system, exploiting improper access controls to register a new admin user, with credentials sent via email.