CVE-2006-0519: Spip

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

SPIP 1.8.2-e and earlier and 1.9 Alpha 2 (5539) and earlier allows remote attackers to obtain sensitive information via a direct request to inc-messforum.php3, which reveals the path in an error message.

Affected products

• Spip Spip: up to and including 1.8.2e; up to and including 1.9_alpha2_5539

Published 2006-02-02. Last modified 2026-06-16.