writeups.xyz / RCE on Spip and Root-Me

Submitter : c2a

Date: 29 September 2020

Bounty : undisclosed

Vulnerabilities :

• RCE
• SQL Injection
• XSS
• Open Redirect
• Reflected File Download

Programs :

• SPIP

Authors :

• Laluka (@TheLaluka)

Link :
https://thinkloveshare.com/hacking/rce_on_spip_and_root_me/