writeups.xyz / RCE on Spip and Root-Me, v2!

Submitter : c2a

Date: 16 August 2022

Bounty : undisclosed

Vulnerabilities :

• RCE
• SSTI
• DNS Rebinding
• XSS
• Code Injection
• Unrestricted File Upload

Programs :

• SPIP

Authors :

• Laluka (@TheLaluka)
• T0 (@___T0___)

Link :
https://thinkloveshare.com/hacking/rce_on_spip_and_root_me_v2/