writeups.xyz / How we have pwned Root-Me in 2022

Submitter : c2a

Date: 12 July 2022

Bounty : undisclosed

Vulnerabilities :

• XSS
• CSRF
• RCE

Programs :

• SPIP

Authors :

• Romain Brun (@SpawnZii)
• Abyss Watcher

Link :
https://spawnzii.github.io/posts/2022/07/how-we-have-pwned-root-me-in-2022/