1 result found Sort:

nuts7
CVE-2023-27372 nuts7
7
63
unknown
1
SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.
cve php poc rce spip nuclei cve2023 exploit web-hacking vulnerability cve-2023-27372 deserialization nuclei-templates remote-code-execution
Created 2023-06-19
4 commits to main branch, last one 2 months ago