CVE-2023-27372: SPIP Remote Command Execution

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-27372
• https://github.com/nuts7/CVE-2023-27372
• https://www.exploit-db.com/exploits/51536
• https://www.sentinelone.com/vulnerability-database/cve-2023-27372/
• https://blog.spip.net/Mise-a-jour-critique-de-securite-sortie-de-SPIP-4-2-1-SPIP-4-1-8-SPIP-4-0-10-et.html
• https://attackerkb.com/topics/G0xQW62Il4/cve-2023-27372
• https://github.com/Chocapikk/CVE-2023-27372
• https://packetstormsecurity.com/files/171921/SPIP-Remote-Command-Execution.html
• https://ethicalhacking.uk/cve-2023-27372-remote-code-execution-in-spip/
• https://www.rapid7.com/db/vulnerabilities/debian-cve-2023-27372/

Related Vulnerabilities

• PoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code
• PoCCVE-2026-2113: tpadmin <= 1.3.12 - Remote Code Execution
• PoCCVE-2026-34234: CtrlPanel <= 1.1.1 - Remote Code Execution
• PoCCVE-2026-41679: Paperclip - Remote Code Execution
• PoCCVE-2026-5562: Provectus kafka-ui <=0.7.2 - Remote Code Execution
• PoCCVE-2026-58123: Hermes WebUI < 0.51.788 - Remote Code Execution
• PoCCVE-2026-82222: GiveWP <= 4.16.7.1 - Remote Code Execution
• PoCCVE-2026-41042: Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution
• 綠色運算｜NUMail - OS Command Injection
• PoCCVE-2026-77806: SPIP < 4.4.22 - Unauthenticated RCE
• PoCCVE-2026-40217: LiteLLM < 1.25.0 - Remote Code Execution
• PoCCVE-2026-45695: Kopia Server 0.23.0 - Remote Code Execution
• PoCCVE-2026-61511: vBulletin 6.x - Remote Code Execution