CVE-2022-28960

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the _oups parameter at /ecrire.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-116

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-SPIP-3-2-8-et-SPIP-3-1-13.htmlRelease Notes, Vendor Advisory
https://github.com/spip/SPIP/commit/0394b44774555ae8331b6e65e35065dfa0bb41e4Patch, Third Party Advisory
https://github.com/spip/SPIP/commit/6c1650713fc948318852ace759aab8f1a84791cfPatch, Third Party Advisory
https://thinkloveshare.com/en/hacking/rce_on_spip_and_root_me/Exploit, Third Party Advisory
https://www.root-me.org/fr/Informations/Faiblesses-decouvertes/Third Party Advisory
https://blog.spip.net/Mise-a-jour-CRITIQUE-de-securite-SPIP-3-2-8-et-SPIP-3-1-13.htmlRelease Notes, Vendor Advisory
https://github.com/spip/SPIP/commit/0394b44774555ae8331b6e65e35065dfa0bb41e4Patch, Third Party Advisory
https://github.com/spip/SPIP/commit/6c1650713fc948318852ace759aab8f1a84791cfPatch, Third Party Advisory
https://thinkloveshare.com/en/hacking/rce_on_spip_and_root_me/Exploit, Third Party Advisory
https://www.root-me.org/fr/Informations/Faiblesses-decouvertes/Third Party Advisory

Timeline

Published: May 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-289618.8Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the lier_trad and where CVE-2022-289629.8Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/classes/Users.php?f=delete_client.CVE-2022-289647.1An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial CVE-2022-289656.5Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast Premium Security before v21.11.2500 allows a CVE-2022-289665.5Wasm3 0.5.0 has a heap-based buffer overflow in NewCodePage in m3_code.c (called indirectly from Compile_BranchTable in m3_compile.c).CVE-2022-289697.5Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the shareSpeed parameter in the function fromSetWifiGusetBasic. This vu CVE-2022-28977.8Measuresoft ScadaPro Server and Client (All Versions) do not properly resolve links before file access; this could allow privilege escalatio CVE-2022-289707.5Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow via the mac parameter in the function GetParentControlInfo. This vulnerabili CVE-2022-289717.5Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the list parameter in the function fromSetIpMacBind. This vulnerability CVE-2022-289727.5Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the function form_fast_setting_wifi_set. This CVE-2022-289737.5Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the function fromAdvSetMacMtuWan. This vulnerab CVE-2022-289755.4A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML v