CVE-2014-5087

Sphider Search Engine prior to version 1.3.6 is vulnerable to remote code execution due to exec() calls in admin/spiderfuncs.php. This CVE (CVE-2014-5087) affects Sphider implementations before 1.3.6 and could let an unauthenticated remote attacker execute arbitrary code, with impact on confident...

CVE-2014-5081

CVE-2014-5081 affects Sphider before 1.3.6, Sphider Pro before 3.2, and Sphider Plus before 3.2. The authenticated bypass arises from an insecure login flow in auth.php where credentials could be accepted without proper validation; the fix implemented was to exit() after successful/failed login t...

CVE-2014-5086

CVE-2014-5086 describes a remote code execution vulnerability in Sphider Pro and Sphider Plus 3.2 caused by insufficient sanitization of fwrite to conf.php. The flaw affects instances of fwrite in Sphider Pro and Sphider Plus only (not in Sphider). The connected documents confirm the root cause (...

CVE-2014-5084

CVE-2014-5084 affects Sphider Pro 3.2. The vulnerability arises from insufficient sanitization of fwrite, which could let a remote attacker execute arbitrary code. CVE-2014-5084 pertains to fwrite in Sphider Pro only and does not exist in Sphider or Sphider Plus. The connected documents do not pr...