CVE-2016-7998
High · 8.8CVSS
8.8
EPSS
13.3%
Published
Jan 18, 2017
CISA due date
—
The record
The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading an HTML file with a crafted (1) INCLUDE or (2) INCLURE tag and then accessing it with a valider_xml action.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | spip | 0 | 3.1.3-1 |
| Debian:13 | spip | 0 | 3.1.3-1 |
| Debian:7 | spip | 0 | 2.1.17-1+deb7u6 |
| Ubuntu:16.04:LTS | spip | 0 | No fix |
| Ubuntu:Pro:16.04:LTS | spip | 0 | No fix |
Related vulnerabilities
- CVE-2024-8517 SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. Also affects spip
- CVE-2024-7954 The porte_plume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable… Also affects spip
- CVE-2017-15736 Cross-site scripting (XSS) vulnerability (stored) in SPIP before 3.1.7 allows remote… Also affects spip
- CVE-2016-7982 Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and… Also affects spip
- CVE-2013-4557 The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used… Also affects spip
- CVE-2026-113786 pypdf is a free and open-source pure-python PDF library. CWE-20
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-20
- CVE-2026-111869 A vulnerability was identified in makeplane plane up to 1.4.2. CWE-20