CVE-2009-3041

SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote…

published September 1, 2009

CVSS
—
EPSS
7%
Percentile
93.8
In the wild
Unconfirmed
What it is

SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06589 · 93.8th percentile
Published
2009-09-01T18:04Z
EPSS history
Timeline
  • 01 SEP 18:04Z
    SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote…
    cvelistv5