Test ID:	1.3.6.1.4.1.25623.1.0.20978
Category:	Web application abuses
Title:	SPIP < 1.8.2-g SQL Injection and XSS Flaws
Summary:	The remote web server has a PHP application that is affected by multiple flaws.
Description:	Summary: The remote web server has a PHP application that is affected by multiple flaws. Vulnerability Insight: The remote version of this software is prone to SQL injection and cross-site scripting attacks. An attacker could send a specially crafted URL to modify SQL requests, for example, to obtain the admin password hash, or execute malicious script code on the remote system. Solution: Upgrade to SPIP version 1.8.2-g or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2006-0517 BugTraq ID: 16458 http://www.securityfocus.com/bid/16458 BugTraq ID: 24397 http://www.securityfocus.com/bid/24397 Bugtraq: 20060131 ZRCSA-200601: SPIP - Multiple Vulnerabilities (Google Search) http://www.securityfocus.com/archive/1/423655/100/0/threaded http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0990.html http://www.zone-h.org/en/advisories/read/id=8650/ http://www.osvdb.org/22844 http://www.osvdb.org/22845 http://www.osvdb.org/22848 http://securitytracker.com/id?1015556 http://secunia.com/advisories/18676 http://securityreason.com/securityalert/395 http://www.vupen.com/english/advisories/2006/0398 XForce ISS Database: spip-forum-sql-injection(24397) https://exchange.xforce.ibmcloud.com/vulnerabilities/24397 Common Vulnerability Exposure (CVE) ID: CVE-2006-0518 BugTraq ID: 16461 http://www.securityfocus.com/bid/16461 http://www.osvdb.org/22849 XForce ISS Database: spip-index-xss(24401) https://exchange.xforce.ibmcloud.com/vulnerabilities/24401 Common Vulnerability Exposure (CVE) ID: CVE-2006-0519 XForce ISS Database: spip-incmessforum-path-disclosure(24399) https://exchange.xforce.ibmcloud.com/vulnerabilities/24399
Copyright	Copyright (C) 2006 David Maciejak

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.