SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
PoC: CVE-2023-27372
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
PoC: CVE-2023-27372-POC
CVE-2023-27372-SPIP-CMS-Bypass
PoC: CVE-2023-27372-PoC
This is a PoC for CVE-2023-27372 which spawns a fully interactive shell.
PoC: CVE-2023-27372
exploit for CVE-2023-27372
PoC: CVE-2023-27372-SPIP-4.2.1-Unauthenticated-RCE-PoC
Unauthenticated remote code execution vulnerability in SPIP before 4.2.1.
PoC: spip-cve-2023-27372-rce
aaaa
PoC: CVE-2023-27372-PoC
This is a PoC for CVE-2023-27372 and spawns a fully interactive shell.
PoC: CVE-2023-27372
Perform With Mass Remote Code Execution In SPIP Version (4.2.1)
PoC: CVE-2023-27372
spip
PoC: CVE-2023-27372
SPIP Vulnerability Scanner - CVE-2023-27372 Detector
PoC: CVE-2023-27372
SPIP Vulnerability Scanner - CVE-2023-27372 Detector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free