CVE-2019-11071

SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because var_memotri is mishandled

published April 10, 2019

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because var_memotri is mishandled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02531 · 84.8th percentile
Published
2019-04-10T20:36Z
EPSS history
Timeline
  • 10 APR 20:36Z
    SPIP 3.1 before 3.1.10 and 3.2 before 3.2.4 allows authenticated visitors to execute arbitrary code on the host server because var_memotri is mishandled
    cvelistv5