CoreCVE
Back

HIGH

A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code

Published Feb 10, 2020

Description

A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5085 pertains to instances of fwrite in Sphider Plus, but do not exist in either Sphider or Sphider Pro.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-74

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Feb 10, 2020
Updated Aug 6, 2024
Reserved Jul 24, 2014
Link CVE-2014-5085
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2014-5085
Red Hat
Severity n/a
Public date n/a
Links CVE-2014-5085