CVE-2013-4557
EPSS 69.5%Published: 11/18/2013Modified: 5/29/2026
Description
The Security Screen (_core_/securite/ecran_securite.php) before 1.1.8 for SPIP, as used in SPIP 3.0.x before 3.0.12, allows remote attackers to execute arbitrary PHP via the connect parameter.
Affected packages (1)
- Debian/spipfrom 0, < 2.1.24-1