CVE-2016-3153

Critical

Published: 08/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

SPIP versions 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allow remote attackers to execute arbitrary PHP code by adding content, related to the filtrer_entites function.

Risk Assessment

Exploitation of this vulnerability could lead to complete system compromise, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update SPIP to the latest version to eliminate this vulnerability and secure the system against potential attacks.

Original NVD description (English source)

SPIP 2.x before 2.1.19, 3.0.x before 3.0.22, and 3.1.x before 3.1.1 allows remote attackers to execute arbitrary PHP code by adding content, related to the filtrer_entites function.