CVE-2022-28960

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the _oups parameter at /ecrire

published May 19, 2022

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the _oups parameter at /ecrire.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02071 · 81.3th percentile
Published
2022-05-19T20:26Z
EPSS history
Timeline
  • 19 MAY 20:26Z
    A PHP injection vulnerability in Spip before v3.2.8 allows attackers to execute arbitrary PHP code via the _oups parameter at /ecrire
    cvelistv5