CVE-2014-5086
10.02.2020, 15:15
A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5086 pertains to instances of fwrite in Sphider Pro and Sphider Plus only, but dont exist in Sphider.
| Vendor | Product | Version |
|---|---|---|
| sphider | sphider | 𝑥 < 1.3.6 |
| sphider-plus | sphider-plus | 𝑥 < 3.2 |
| sphiderpro | sphider_pro | 𝑥 < 3.2 |
𝑥
= Vulnerable software versions