Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2016-9998

SPIP 3.1.x suffer from a Reflected Cross Site Scripting Vulnerability in /ecrire/exec/info_plugin.php involving the `$plugin` parameter, as demonstrated by a /ecrire/?exec=info_plugin URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.1%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
Products affected by CVE-2016-9998
  • Spip » Spip » Version: 3.1.0
    cpe:2.3:a:spip:spip:3.1.0
  • Spip » Spip » Version: 3.1.1
    cpe:2.3:a:spip:spip:3.1.1
  • Spip » Spip » Version: 3.1.2
    cpe:2.3:a:spip:spip:3.1.2
  • Spip » Spip » Version: 3.1.3
    cpe:2.3:a:spip:spip:3.1.3


Products
Pricing
Contact Us

Shodan ® - All rights reserved