CVE-2016-7998

Published: Jan 18, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

The SPIP template composer/compiler in SPIP 3.1.2 and earlier allows remote authenticated users to execute arbitrary PHP code by uploading an HTML file with a crafted (1) INCLUDE or (2) INCLURE tag and then accessing it with a valider_xml action.

Affected (1)

Products: Spip: Spip

Spip

1 product

Spip

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Spip Spip	Up to 3.1.2

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://www.openwall.com/lists/oss-security/2016/10/05/17

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/07/5

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/08/6

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/93451

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://core.spip.net/projects/spip/repository/revisions/23186

Source: cve@mitre.org

Issue TrackingPatchVendor Advisory

https://core.spip.net/projects/spip/repository/revisions/23189

Source: cve@mitre.org

Issue TrackingPatchVendor Advisory

https://core.spip.net/projects/spip/repository/revisions/23192

Source: cve@mitre.org

Issue TrackingPatchVendor Advisory

https://sysdream.com/news/lab/2016-10-19-spip-3-1-2-template-compiler-composer-php-code-execution-cve-2016-7998/

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2016/10/05/17