← Database

CVE-2023-24258

CRITICAL CVSS: 9.8 Published: 2023-02-27 Modified: 2026-06-17

Description

SPIP v4.1.5 and earlier was discovered to contain a SQL injection vulnerability via the _oups parameter. This vulnerability allows attackers to execute arbitrary code via a crafted POST request.

Affected Platforms

Spip Spip

Weakness Type

CWE-89

References