CVE-2014-5087

A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote malicious user execute arbitrary code.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-02-07

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Sphider (Sphider)
• Sphider-plus (Sphider-plus)
• Sphider Pro (Sphiderpro)

References

• http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html
• https://vulmon.com/searchpage?page=2&q=Shayan+S