Vulnerabilities > Spip > Spip > 1.8.2
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2009-01-02 | CVE-2008-5813 | SQL Injection vulnerability in Spip SQL injection vulnerability in inc/rubriques.php in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 allows remote attackers to execute arbitrary SQL commands via the ID parameter. | 7.5 |
2009-01-02 | CVE-2008-5812 | Multiple Unspecified vulnerability in SPIP Versions Prior to 2.0.2 Multiple unspecified vulnerabilities in SPIP 1.8 before 1.8.3b, 1.9 before 1.9.2g, and 2.0 before 2.0.2 have unknown impact and attack vectors. | 10.0 |
2005-12-22 | CVE-2005-4494 | Cross-Site Scripting vulnerability in Spip 1.8.2 Cross-site scripting (XSS) vulnerability in SPIP 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) spip_login.php3 and (2) spip_pass.php3. | 2.6 |