CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5086

A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5086 pertains to instances of fwrite in Sphider Pro and Sphider Plus only, but don’t exist in Sphider.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.067

EPSS Ranking 90.9%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2014-5086

Sphider-Plus » Sphider-Plus » Version: N/A

cpe:2.3:a:sphider-plus:sphider-plus:-
Sphider-Plus » Sphider-Plus » Version: 1.0

cpe:2.3:a:sphider-plus:sphider-plus:1.0
Sphider-Plus » Sphider-Plus » Version: 1.1

cpe:2.3:a:sphider-plus:sphider-plus:1.1
Sphider-Plus » Sphider-Plus » Version: 1.2

cpe:2.3:a:sphider-plus:sphider-plus:1.2
Sphider-Plus » Sphider-Plus » Version: 1.3

cpe:2.3:a:sphider-plus:sphider-plus:1.3
Sphider-Plus » Sphider-Plus » Version: 1.4

cpe:2.3:a:sphider-plus:sphider-plus:1.4
Sphider-Plus » Sphider-Plus » Version: 1.5

cpe:2.3:a:sphider-plus:sphider-plus:1.5
Sphider-Plus » Sphider-Plus » Version: 1.6

cpe:2.3:a:sphider-plus:sphider-plus:1.6
Sphider-Plus » Sphider-Plus » Version: 1.7

cpe:2.3:a:sphider-plus:sphider-plus:1.7
Sphider-Plus » Sphider-Plus » Version: 1.8

cpe:2.3:a:sphider-plus:sphider-plus:1.8
Sphider-Plus » Sphider-Plus » Version: 1.9

cpe:2.3:a:sphider-plus:sphider-plus:1.9
Sphider-Plus » Sphider-Plus » Version: 2.0

cpe:2.3:a:sphider-plus:sphider-plus:2.0
Sphider-Plus » Sphider-Plus » Version: 2.1

cpe:2.3:a:sphider-plus:sphider-plus:2.1
Sphider-Plus » Sphider-Plus » Version: 2.2

cpe:2.3:a:sphider-plus:sphider-plus:2.2
Sphider-Plus » Sphider-Plus » Version: 2.3

cpe:2.3:a:sphider-plus:sphider-plus:2.3
Sphider-Plus » Sphider-Plus » Version: 2.4

cpe:2.3:a:sphider-plus:sphider-plus:2.4
Sphider-Plus » Sphider-Plus » Version: 2.5

cpe:2.3:a:sphider-plus:sphider-plus:2.5
Sphider-Plus » Sphider-Plus » Version: 2.6

cpe:2.3:a:sphider-plus:sphider-plus:2.6
Sphider-Plus » Sphider-Plus » Version: 2.7

cpe:2.3:a:sphider-plus:sphider-plus:2.7
Sphider-Plus » Sphider-Plus » Version: 2.8

cpe:2.3:a:sphider-plus:sphider-plus:2.8
Sphider-Plus » Sphider-Plus » Version: 2.9

cpe:2.3:a:sphider-plus:sphider-plus:2.9
Sphider » Sphider » Version: 1.3.2

cpe:2.3:a:sphider:sphider:1.3.2
Sphider » Sphider » Version: 1.3.3

cpe:2.3:a:sphider:sphider:1.3.3
Sphider » Sphider » Version: 1.3.4

cpe:2.3:a:sphider:sphider:1.3.4
Sphider » Sphider » Version: 1.3.5

cpe:2.3:a:sphider:sphider:1.3.5
Sphiderpro » Sphider Pro » Version: N/A

cpe:2.3:a:sphiderpro:sphider_pro:-
Sphiderpro » Sphider Pro » Version: 1.0

cpe:2.3:a:sphiderpro:sphider_pro:1.0
Sphiderpro » Sphider Pro » Version: 1.1

cpe:2.3:a:sphiderpro:sphider_pro:1.1
Sphiderpro » Sphider Pro » Version: 1.2

cpe:2.3:a:sphiderpro:sphider_pro:1.2
Sphiderpro » Sphider Pro » Version: 1.3

cpe:2.3:a:sphiderpro:sphider_pro:1.3
Sphiderpro » Sphider Pro » Version: 1.4

cpe:2.3:a:sphiderpro:sphider_pro:1.4
Sphiderpro » Sphider Pro » Version: 1.5

cpe:2.3:a:sphiderpro:sphider_pro:1.5
Sphiderpro » Sphider Pro » Version: 1.6

cpe:2.3:a:sphiderpro:sphider_pro:1.6
Sphiderpro » Sphider Pro » Version: 1.7

cpe:2.3:a:sphiderpro:sphider_pro:1.7
Sphiderpro » Sphider Pro » Version: 1.8

cpe:2.3:a:sphiderpro:sphider_pro:1.8
Sphiderpro » Sphider Pro » Version: 1.9

cpe:2.3:a:sphiderpro:sphider_pro:1.9
Sphiderpro » Sphider Pro » Version: 2.0

cpe:2.3:a:sphiderpro:sphider_pro:2.0
Sphiderpro » Sphider Pro » Version: 2.1

cpe:2.3:a:sphiderpro:sphider_pro:2.1
Sphiderpro » Sphider Pro » Version: 2.2

cpe:2.3:a:sphiderpro:sphider_pro:2.2
Sphiderpro » Sphider Pro » Version: 2.3

cpe:2.3:a:sphiderpro:sphider_pro:2.3
Sphiderpro » Sphider Pro » Version: 2.4

cpe:2.3:a:sphiderpro:sphider_pro:2.4
Sphiderpro » Sphider Pro » Version: 2.5

cpe:2.3:a:sphiderpro:sphider_pro:2.5
Sphiderpro » Sphider Pro » Version: 2.6

cpe:2.3:a:sphiderpro:sphider_pro:2.6
Sphiderpro » Sphider Pro » Version: 2.7

cpe:2.3:a:sphiderpro:sphider_pro:2.7
Sphiderpro » Sphider Pro » Version: 2.8

cpe:2.3:a:sphiderpro:sphider_pro:2.8
Sphiderpro » Sphider Pro » Version: 2.9

cpe:2.3:a:sphiderpro:sphider_pro:2.9
Sphiderpro » Sphider Pro » Version: 3.0

cpe:2.3:a:sphiderpro:sphider_pro:3.0
Sphiderpro » Sphider Pro » Version: 3.1

cpe:2.3:a:sphiderpro:sphider_pro:3.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-5086

Products

Pricing

Contact Us