CVE-2014-5086

A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5086 pertains to instances of fwrite in Sphider Pro and Sphider Plus only, but don’t exist...

CVE-2014-5086

CVE-2014-5086 describes a remote code execution vulnerability in Sphider Pro and Sphider Plus 3.2 caused by insufficient sanitization of fwrite to conf.php. The flaw affects instances of fwrite in Sphider Pro and Sphider Plus only (not in Sphider). The connected documents confirm the root cause (...

Sphider Search Engine - Multiple Vulnerabilities

No description provided by source. Exploit Title: Sphider Search Engine - Multiple Vulnerabilities Google Dork: ext:php intext:sphider inurl:search.php Date: 6/20/2014 Exploit Author: Shayan Sadigh twitter.com/r1pplex | [email protected] Vendor Homepage: http://www.sphider.eu/ Version:...

Sphider Search Engine - Multiple Vulnerabilities

Sphider Search Engine - Multiple Vulnerabilities Exploit Title: Sphider Search Engine - Multiple Vulnerabilities Google Dork: ext:php intext:sphider inurl:search.php Date: 6/20/2014 Exploit Author: Shayan Sadigh twitter.com/r1pplex | Vendor Homepage: http://www.sphider.eu/ Version: Sphider 1.3.6 ...