{"cvss":0.0,"datePublished":"2009-08-06T00:00:00Z","dateUpdated":"2009-08-06T00:00:00Z","description":"SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 does not use proper access control for (1) ecrire/exec/install.php and (2) ecrire/index.php, which allows remote attackers to conduct unauthorized activities related to installation and backups, as exploited in the wild in August 2009.","dueDate":"","id":"CVE-2009-3041","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"SPIP","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"SPIP 1.9 before 1.9.2i and 2.0.x through 2.0.8 Installation and Backup Unauthorized Activity Vulnerability","vendor":"SPIP"}