CVE-2014-5081

sphider prior to 1.3.6, sphider-pro prior to 3.2, and sphider-plus prior to 3.2 allow authentication bypass

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-01-10

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Sphider (Sphider)
• Sphider-plus (Sphider-plus)
• Sphider Pro (Sphiderpro)

References

• http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html
• https://www.exploit-db.com/exploits/34238