CVE-2014-5084 | BDVDB-2026-130470 Detail

Description#

A Command Execution vulnerability exists in Sphider Pro 3.2 due to insufficient sanitization of fwrite, which could let a remote malicious user execute arbitrary code. CVE-2014-5084 pertains to instances of fwrite in Sphider Pro only, but do not exist in either Sphider or Sphider Plus.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html

Exploit#

No public exploit known

History#

Version 12020-02-10Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.