Search for packages
| purl | pkg:composer/spip/spip@3.1.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-etmk-f7bn-eyee
Aliases: CVE-2017-9736 |
OS Command Injection SPIP does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-hrvd-j6ye-4qfp
Aliases: CVE-2016-3153 |
Code Injection SPIP allows remote attackers to execute arbitrary PHP code by adding content, related to the `filtrer_entites` function. |
Affected by 0 other vulnerabilities. |
|
VCID-qvmf-dzcc-8bhs
Aliases: CVE-2019-11071 |
Improper Input Validation SPIP allows authenticated visitors to execute arbitrary code on the host server because `var_memotri` is mishandled. |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:39:05.895377+00:00 | GitLab Importer | Affected by | VCID-qvmf-dzcc-8bhs | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/spip/spip/CVE-2019-11071.yml | 38.6.0 |
| 2026-06-02T04:36:56.221686+00:00 | GitLab Importer | Affected by | VCID-etmk-f7bn-eyee | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/spip/spip/CVE-2017-9736.yml | 38.6.0 |
| 2026-06-02T04:36:31.673942+00:00 | GitLab Importer | Affected by | VCID-hrvd-j6ye-4qfp | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/spip/spip/CVE-2016-3153.yml | 38.6.0 |