Code injection

Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into settings/conf.php via the wordupperbound parameter...

PT-2014-6333

Name of the Vulnerable Software and Affected Versions Sphider version 1.3.6 Description A static code injection issue allows remote authenticated users to inject arbitrary PHP code into settings/conf.php via the word upper bound parameter in admin/admin.php. Recommendations For Sphider version...

CVE-2014-5194: Improper Control of Generation of Code

Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into settings/conf.php via the wordupperbound parameter...

Sphider Script 1.3.x Command Execution

======================================================================= Sphider Script Remote Code Execution ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ ...

Sphider Script - Remote Code Execution

Sphider Script - Remote Code Execution ======================================================================= Sphider Script Remote Code Execution ======================================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 ...