Sphider Search Engine 1.3.6 - 'word_upper_bound' RCE (Authenticated)

Exploit Title: Sphider Search Engine 1.3.6 - 'wordupperbound' RCE Authenticated Google Dork: intitle:"Sphider Admin Login" Date: 2014-07-28 Exploit Author: Gurkirat Singh Vendor Homepage: http://www.sphider.eu/ Software Link: http://www.sphider.eu/sphider-1.3.6.zip Version: v1.3.6 Tested on:...

CVE-2014-5087

A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote malicious user execute arbitrary code...

Code injection

A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote malicious user execute arbitrary code...

CVE-2014-5087

Sphider Search Engine prior to version 1.3.6 is vulnerable to remote code execution due to exec() calls in admin/spiderfuncs.php. This CVE (CVE-2014-5087) affects Sphider implementations before 1.3.6 and could let an unauthenticated remote attacker execute arbitrary code, with impact on confident...

CVE-2014-5087

A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote malicious user execute arbitrary code...

Sphider-Search-Engine 1.3.6 /sphider/admin/admin.php SQL注入漏洞

No description provided by source...

Sphider-Search-Engine 1.3.5 /sphider/admin/admin.php 登录绕过漏洞

No description provided by source...

Sphider Search Engine - Multiple Vulnerabilities

No description provided by source. Exploit Title: Sphider Search Engine - Multiple Vulnerabilities Google Dork: ext:php intext:sphider inurl:search.php Date: 6/20/2014 Exploit Author: Shayan Sadigh twitter.com/r1pplex | [email protected] Vendor Homepage: http://www.sphider.eu/ Version:...

Sphider Search Engine - Multiple Vulnerabilities

Exploit for php platform in category web applications 1. patched April 2013, in all versions before 1.3.6 for sphider, 3.2 for sphider-pro, and 3.2 for sphider-plus, existed an auth bypass in auth.php, the fix for this was adding an exit;. before that anyone could simply send credentials that wou...