Arthur Deloffre

**Name of the Vulnerable Software and Affected Versions** SPIP versions prior to 4.4.10 **Description** SPIP versions before 4.4.10 are susceptible to an authentication bypass. This is due to PHP type juggling, which allows unauthenticated attackers to access protected information. Attackers can exploit loose type comparisons within the authentication logic to bypass login verification and retrieve sensitive internal data. **Recommendations** Update to SPIP version 4.4.10 or later.

**Name of the Vulnerable Software and Affected Versions** SPIP versions prior to 4.4.10 **Description** SPIP versions before 4.4.10 have a SQL injection flaw. Authenticated low-privilege users can execute arbitrary SQL queries through union-based injection techniques. Attackers can combine this SQL injection with PHP tag processing to achieve remote code execution on the server. **Recommendations** Update to SPIP version 4.4.10 or later.

**Name of the Vulnerable Software and Affected Versions** SPIP versions prior to 4.4.8 **Description** SPIP before version 4.4.8 contains a Cross-Site Scripting (XSS) issue in the public area due to inadequate detection of malicious content by the `echapper html suspect()` function. This allows an attacker to inject scripts that execute in a visitor’s browser. The SPIP security screen does not mitigate this issue. **Recommendations** Update to SPIP version 4.4.8 or later.

**Name of the Vulnerable Software and Affected Versions** SPIP versions prior to 4.4.8 **Description** SPIP before version 4.4.8 contains a Cross-Site Scripting (XSS) issue in the private area due to improper handling of iframe tags. The application does not adequately sandbox or escape iframe content within the back-office, which allows an attacker to inject and execute malicious scripts. The vulnerability is not addressed by the SPIP security screen. **Recommendations** Update to SPIP version 4.4.8 or later.

**Name of the Vulnerable Software and Affected Versions** SPIP versions prior to 4.4.8 **Description** The application does not properly handle iframe content in the private area, allowing an attacker to inject and execute malicious scripts through iframe tags. The issue occurs because the application does not sandbox or escape iframe content in the back-office. The fix involves adding a sandbox attribute to iframe tags within the private area. This issue is not addressed by the SPIP security screen. **Recommendations** Update to SPIP version 4.4.8 or later.

**Name of the Vulnerable Software and Affected Versions** SPIP versions prior to 4.4.8 **Description** SPIP before version 4.4.8 contains a Cross-Site Scripting (XSS) issue in the public area due to insufficient detection of malicious content by the `echapper html suspect()` function. This allows an attacker to inject scripts that can execute in a visitor’s browser. The SPIP security screen does not mitigate this issue. **Recommendations** Update SPIP to version 4.4.8 or later.

**Name of the Vulnerable Software and Affected Versions** Jalios JPlatform versions prior to 10.0.6 **Description** The DB chooser functionality in Jalios JPlatform improperly neutralizes special elements used in an SQL command, allowing authenticated administrative users to trigger SQL Injection. A patch was released on 2023-02-06. **Recommendations** For versions prior to 10.0.6, update to version 10.0.6 or apply the PatchPlugin release issued on 2023-02-06 to resolve the issue. As a temporary workaround, consider restricting access to the DB chooser functionality to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Jalios JPlatform versions prior to 10.0.8 Jalios Workplace versions 5.3 through 6.2 **Description** The issue is related to improper restriction of XML external entity references, allowing XML injection, and improper neutralization of input during web page generation, leading to cross-site scripting (XSS) vulnerabilities, including both reflected and stored XSS. **Recommendations** For Jalios JPlatform versions prior to 10.0.8, update to version 10.0.8 or later. For Jalios Workplace versions 5.3 through 6.2, consider disabling any features that generate web pages based on user input until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Jalios JPlatform versions prior to 10.0.8 (SP8) **Description** The issue is related to an Improper Restriction of XML External Entity Reference vulnerability, which allows XML Injection. **Recommendations** For versions prior to 10.0.8 (SP8), update to version 10.0.8 (SP8) or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SPIP versions prior to 4.3.2, 4.2.16, and 4.1.18 **Description** SPIP is susceptible to a command injection issue. An unauthenticated, remote attacker can execute arbitrary operating system commands by submitting a specially crafted multipart file upload HTTP request. A proof of concept has been published, increasing the risk of exploitation. Approximately 200+ potentially affected devices have been identified via ZoomEye dorking. **Recommendations** SPIP versions prior to 4.3.2 must be updated. SPIP versions prior to 4.2.16 must be updated. SPIP versions prior to 4.1.18 must be updated.