EDB-40595
functionalSPIP 3.1.2 Template Compiler/Composer - PHP Code Execution
view exploit source exploit_dbverifiedtype webappsauthor Sysdreampublished 2016-10-20catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-7998US | high8.8 | Exploit | ||
The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading an HTML file with a crafted (1) INCLUDE o… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan