CVE Catalog
CVE-2017-9736
CriticalSummary
SPIP versions 3.1.x before 3.1.6 and 3.2.x before Beta 3 do not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution.
Risk Assessment
An attacker can exploit this vulnerability to execute remote code, potentially gaining control over the system.
Recommendation
It is recommended to update SPIP to version 3.1.6 or 3.2.x Beta 3 to mitigate this vulnerability.
Original NVD description (English source)
SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution.