SPIP Security Bypass and Arbitrary File Upload Vulnerability

Bugtraq ID:	34575
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 13 2009 12:00AM
Updated:	Apr 20 2009 10:46PM
Credit:	SPIP
Vulnerable:	SPIP SPIP 2.0.2 SPIP SPIP 1.8.3 SPIP SPIP 1.8.2 g SPIP SPIP 2.0 RC1 SPIP SPIP 2.0 SPIP SPIP 1.9.2g SPIP SPIP 1.9.2d SPIP SPIP 1.8.3b SPIP SPIP 1.8.2-f SPIP SPIP 1.8.2-e SPIP SPIP 1.8.2-d
Not Vulnerable:	SPIP SPIP 2.0.7 SPIP SPIP 1.9.2h

SPIP Security Bypass and Arbitrary File Upload Vulnerability

SPIP is prone to multiple vulnerabilities because the application fails to adequately sanitize user-supplied input.

Attackers can leverage these issues to bypass certain security restrictions and to upload and execute arbitrary code in the context of the application.

These issues affect versions prior to SPIP 2.0.7 and 1.9.2h.

SPIP Security Bypass and Arbitrary File Upload Vulnerability

Attackers may exploit these issues through a browser.

SPIP Security Bypass and Arbitrary File Upload Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.

SPIP Security Bypass and Arbitrary File Upload Vulnerability

References:

• Nouvelle version de SPIP : 2.0.7 (et 1.9.2h) (SPIP)
  
• SPIP Homepage (SPIP)