CVE-2009-3041: High severity spip vulnerability
SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3041?
CVE-2009-3041 is considered a high severity vulnerability due to improper access controls that can allow unauthorized actions.
How do I fix CVE-2009-3041?
To fix CVE-2009-3041, update to SPIP version 1.9.2i or 2.0.9 or later which contain the necessary security patches.
What are the affected versions in CVE-2009-3041?
CVE-2009-3041 affects SPIP versions 1.9 before 1.9.2i and 2.0.x up to 2.0.8.
What actions can be conducted due to CVE-2009-3041?
CVE-2009-3041 allows remote attackers to conduct unauthorized actions related to installation and backups.
When was CVE-2009-3041 first exploited in the wild?
CVE-2009-3041 was first exploited in the wild in August 2009.