Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

spip: privilege escalation/cross-site scripting

Package(s):

spip

CVE #(s):

Created:

November 21, 2011

Updated:

November 23, 2011

Description:

From the Debian advisory:

Two vulnerabilities have been found in SPIP, a website engine for publishing, which allow privilege escalation to site administrator privileges and cross-site scripting.

Alerts:

Debian

DSA-2349-1

2011-11-19

(Log in to post comments)