https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:29:22 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0217 certfr-2026-avi-0217 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0217 https://cve.radiocsirt.org/vuln/cnvd-2026-13834 cnvd-2026-13834 https://cve.radiocsirt.org/vuln/cnvd-2026-13834 https://cve.radiocsirt.org/vuln/euvd-2026-274512 EUVD-2026-274512 https://cve.radiocsirt.org/vuln/euvd-2026-274512 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22206 <p>SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.</p> <p>SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-22206 https://cve.radiocsirt.org/vuln/ghsa-48x6-97gc-jx62 <p>SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.</p> <p>SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.</p> https://cve.radiocsirt.org/vuln/ghsa-48x6-97gc-jx62 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-22206 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: spip, Ubuntu:Pro:18.04:LTS: spip, Ubuntu:Pro:20.04:LTS: spip, Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip, Ubuntu:25.10: spip, Ubuntu:26.04:LTS: spip</p> <p>SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: spip, Ubuntu:Pro:18.04:LTS: spip, Ubuntu:Pro:20.04:LTS: spip, Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip, Ubuntu:25.10: spip, Ubuntu:26.04:LTS: spip</p> <p>SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote code execution on the server.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-22206