CVE-2013-2118

Published: Jul 9, 2013Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SPIP 3.0.x before 3.0.9, 2.1.x before 2.1.22, and 2.0.x before 2.0.23 allows remote attackers to gain privileges and "take editorial control" via vectors related to ecrire/inc/filtres.php.

Affected (53)

Products: Spip: Spip

Spip

1 product

Spip

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Spip Spip	Version 3.0.0
Spip Spip	Version 3.0.1
Spip Spip	Version 3.0.2
Spip Spip	Version 3.0.3
Spip Spip	Version 3.0.4
Spip Spip	Version 3.0.5
Spip Spip	Version 3.0.6
Spip Spip	Version 3.0.7
Spip Spip	Version 3.0.8

Configuration B

21 vulnerable

Vulnerable Software	Affected Versions
Spip Spip	Version 2.1.10
Spip Spip	Version 2.1.11
Spip Spip	Version 2.1.12
Spip Spip	Version 2.1.13
Spip Spip	Version 2.1.14
Spip Spip	Version 2.1.15
Spip Spip	Version 2.1.16
Spip Spip	Version 2.1.17
Spip Spip	Version 2.1.18
Spip Spip	Version 2.1.19
Spip Spip	Version 2.1.1
Spip Spip	Version 2.1.20
Spip Spip	Version 2.1.21
Spip Spip	Version 2.1.2
Spip Spip	Version 2.1.3
Spip Spip	Version 2.1.4
Spip Spip	Version 2.1.5
Spip Spip	Version 2.1.6
Spip Spip	Version 2.1.7
Spip Spip	Version 2.1.8
Spip Spip	Version 2.1.9

Configuration C

23 vulnerable

Vulnerable Software	Affected Versions
Spip Spip	Version 2.0.0
Spip Spip	Version 2.0.10
Spip Spip	Version 2.0.11
Spip Spip	Version 2.0.12
Spip Spip	Version 2.0.13
Spip Spip	Version 2.0.14
Spip Spip	Version 2.0.15
Spip Spip	Version 2.0.16
Spip Spip	Version 2.0.17
Spip Spip	Version 2.0.18
Spip Spip	Version 2.0.19
Spip Spip	Version 2.0.1
Spip Spip	Version 2.0.20
Spip Spip	Version 2.0.21
Spip Spip	Version 2.0.22
Spip Spip	Version 2.0.2
Spip Spip	Version 2.0.3
Spip Spip	Version 2.0.4
Spip Spip	Version 2.0.5
Spip Spip	Version 2.0.6
Spip Spip	Version 2.0.7
Spip Spip	Version 2.0.8
Spip Spip	Version 2.0.9