CVE-2013-4557

The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

25.29% chance of exploitation in the next 30 days, 98th percentile

Published

2013-11-15

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spip_connect_exec.rb

References

• CVE Record
• NVD entry

Related

• CVE-2013-4547
• CVE-2013-4579
• CVE-2013-4490
• CVE-2013-4614
• CVE-2013-4474
• CVE-2013-4615