| Package | Affected versions | Patched versions |
|---|---|---|
| spip | < 4.4.10 | 4.4.10 |
SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free