Description
SPIP是SPIP的一个用于创建 Internet 站点的免费软件。 SPIP 4.2.1之前版本存在安全漏洞，该漏洞源于序列化处理不当，攻击者利用该漏洞可以远程执行代码。
SPIP 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/adysec/POC/blob/main/wpoc/SPIP/SPIP-porte_plume%E6%8F%92%E4%BB%B6%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8FPHP%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2024-7954).md
https://cve.imfht.com/poc_detail/9837c980143a787dd0e23117c4fbb7952e130c65
https://blog.csdn.net/qq_23003811/article/details/140815381
https://www.cnvd.org.cn/flaw/show/CNVD-2022-66690
https://www.cnblogs.com/spmonkey/p/17550492.html
https://www.sentinelone.com/vulnerability-database/cve-2023-27372/
https://ethicalhacking.uk/cve-2024-8517-spip-remote-code-execution-vulnerability/
https://www.rapid7.com/db/modules/exploit/multi/http/spip_porte_plume_previsu_rce/
https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-7954-remote-code-execution-vulnerability-in-spip-porte-plume-plugin
https://nvd.nist.gov/vuln/detail/CVE-2024-7954
https://www.exploit-db.com/exploits/51536