pentester.land· Sep 29, 2020· by Laluka (@TheLaluka)

RCE on Spip and Root-Me

Target Program: SPIP

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#RCE#SQL injection#XSS#Open redirect#Reflected file download