CVE-2016-7982
High · 7.5CVSS
7.5
EPSS
20.5%
Published
Jan 18, 2017
CISA due date
—
The record
Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml action.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | spip | 0 | 3.1.3-1 |
| Debian:13 | spip | 0 | 3.1.3-1 |
| Debian:7 | spip | 0 | 2.1.17-1+deb7u6 |
| Ubuntu:16.04:LTS | spip | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | spip | 0 | No fix |
Related vulnerabilities
- CVE-2024-8517 SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. Also affects spip
- CVE-2024-7954 The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable… Also affects spip
- CVE-2017-15736 Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote… Also affects spip
- CVE-2016-7998 The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated… Also affects spip
- CVE-2013-4557 The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used… Also affects spip
- CVE-2026-81163 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')… CWE-22
- CVE-2026-112049 Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in… CWE-22
- CVE-2026-112005 WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote… CWE-22