https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 20:18:42 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-104085 <p>odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $(id) in a non-.odt filename, which survives insufficient sanitization in odt2spip_deplacer_fichier_upload() and LibreOffice::createCommand(), to achieve remote code execution as the web-server user during the LibreOffice conversion process.</p> <p>odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $(id) in a non-.odt filename, which survives insufficient sanitization in odt2spip_deplacer_fichier_upload() and LibreOffice::createCommand(), to achieve remote code execution as the web-server user during the LibreOffice conversion process.</p> https://db.gcve.eu/vuln/fkie_cve-2026-104085 https://db.gcve.eu/vuln/ghsa-87r4-r3m7-gvjv <p>odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $(id) in a non-.odt filename, which survives insufficient sanitization in odt2spip_deplacer_fichier_upload() and LibreOffice::createCommand(), to achieve remote code execution as the web-server user during the LibreOffice conversion process.</p> <p>odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $(id) in a non-.odt filename, which survives insufficient sanitization in odt2spip_deplacer_fichier_upload() and LibreOffice::createCommand(), to achieve remote code execution as the web-server user during the LibreOffice conversion process.</p> https://db.gcve.eu/vuln/ghsa-87r4-r3m7-gvjv https://db.gcve.eu/vuln/ubuntu-cve-2026-104085 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: spip, Ubuntu:Pro:18.04:LTS: spip, Ubuntu:Pro:20.04:LTS: spip, Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip, Ubuntu:26.10: spip, Ubuntu:26.04:LTS: spip</p> <p>odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $(id) in a non-.odt filename, which survives insufficient sanitization in odt2spip_deplacer_fichier_upload() and LibreOffice::createCommand(), to achieve remote code execution as the web-server user during the LibreOffice conversion process.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: spip, Ubuntu:Pro:18.04:LTS: spip, Ubuntu:Pro:20.04:LTS: spip, Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip, Ubuntu:26.10: spip, Ubuntu:26.04:LTS: spip</p> <p>odt2spip plugin for SPIP before 4.4.0 contains an OS command injection vulnerability that allows authenticated authors to execute arbitrary commands by uploading a document with a maliciously crafted filename through the document import form. Attackers can embed shell metacharacters such as $(id) in a non-.odt filename, which survives insufficient sanitization in odt2spip_deplacer_fichier_upload() and LibreOffice::createCommand(), to achieve remote code execution as the web-server user during the LibreOffice conversion process.</p> https://db.gcve.eu/vuln/ubuntu-cve-2026-104085