Security Advisory
CVE-2014-5086
8.8
HIGH
Vulnerability Description
A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5086 pertains to instances of fwrite in Sphider Pro and Sphider Plus only, but don’t exist in Sphider.
Published Date
February 10, 2020
Official Source
NIST NVD Advisory