CVE

Id
94802  
CVE No.
CVE-2016-7982  
Status
Candidate  
Description
Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml action.  
Phase
Assigned (20160909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
797626 94802 CVE-2016-7982 MLIST:[oss-security] 20161005 SPIP vulnerabilities: request for 5 CVE  View
797627 94802 CVE-2016-7982 URL:http://www.openwall.com/lists/oss-security/2016/10/05/17  View
797628 94802 CVE-2016-7982 MLIST:[oss-security] 20161006 Re: SPIP vulnerabilities: request for 5 CVE  View
797629 94802 CVE-2016-7982 URL:http://www.openwall.com/lists/oss-security/2016/10/06/6  View
797630 94802 CVE-2016-7982 MLIST:[oss-security] 20161012 CVE-2016-7982: SPIP 3.1.1/3.1.2 File Enumeration / Path Traversal  View
797631 94802 CVE-2016-7982 URL:http://www.openwall.com/lists/oss-security/2016/10/12/8  View
797632 94802 CVE-2016-7982 CONFIRM:https://core.spip.net/projects/spip/repository/revisions/23200  View
797633 94802 CVE-2016-7982 BID:93451  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4772 JVNDB-2016-005545 Oracle PeopleSoft Products の PeopleSoft Enterprise HCM における Schedule に関する脆弱性 Oracle PeopleSoft Products の PeopleSoft Enterprise HCM には、Schedule に関する処理に不備があるため、機密性に影響のある脆弱性が存在します。 CVE-2016-8295 94802 4 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005545.html  View