EDB-9448
functionalSPIP < 2.0.9 - Arbitrary Copy All Passwords to '.XML' File
view exploit source exploit_dbverifiedtype webappsauthor Kernel_Panikpublished 2009-08-18catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2009-3041US | high7.5 | Exploit | ||
SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan