Skip to content
Noroxi

sphider records

14 published records for vendor sphider.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
6
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2014-5081
    42Plan

    sphider prior to 1.3.6, sphider-pro prior to 3.2, and sphider-plus prior to 3.2 allow authentication bypass

    CriticalCVSS 9.8Proof of conceptEPSS 10%

    sphider · sphiderJan 10, 2020

  • CVE-2014-5087
    41Plan

    A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote maliciou

    CriticalCVSS 9.8Proof of conceptEPSS 7%

    sphider · sphiderFeb 7, 2020

  • CVE-2014-5086
    38Monitor

    A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which

    HighCVSS 8.8Proof of conceptEPSS 10%

    sphider · sphiderFeb 10, 2020

  • CVE-2014-5083
    37Monitor

    A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a r

    HighCVSS 8.8Proof of conceptEPSS 6%

    sphider · sphiderFeb 10, 2020

  • CVE-2007-2411
    31Monitor

    PHP remote file inclusion vulnerability in index.php in Sphider 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the

    HighCVSS 7.5No exploitEPSS 3%

    sphider · sphiderMay 1, 2007

  • CVE-2014-5082
    31Monitor

    Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers

    HighCVSS 7.5Proof of conceptEPSS 2%

    sphider · sphiderAug 6, 2014

  • CVE-2014-5192
    30Monitor

    SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL commands via the filter par

    HighCVSS 7.5Proof of conceptEPSS 1%

    sphider · sphiderAug 7, 2014

  • CVE-2006-7057
    30Monitor

    SQL injection vulnerability in search.php in Sphider before 1.3.1c allows remote attackers to execute arbitrary SQL commands via the categor

    HighCVSS 7.5No exploitEPSS 1%

    sphider · sphiderFeb 23, 2007

  • CVE-2014-5194
    27Monitor

    Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into

    MediumCVSS 6.5Proof of conceptEPSS 4%

    sphider · sphiderAug 7, 2014

  • CVE-2006-2506
    27Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in search.php in Sphider allow remote attackers to inject arbitrary web script or HTML v

    MediumCVSS 6.8No exploitEPSS 2%

    sphider · sphiderMay 22, 2006

  • CVE-2006-1784
    22Monitor

    PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disabled, allows remote

    MediumCVSS 5.1Proof of conceptEPSS 8%

    sphider · sphiderApr 13, 2006

  • CVE-2014-5193
    18Monitor

    Cross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrary web script or HTML

    MediumCVSS 4.3Proof of conceptEPSS 2%

    sphider · sphiderAug 7, 2014

  • CVE-2006-7058
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Sphider before 1.3.1c allow remote attackers to inject arbitrary web script or HTML v

    MediumCVSS 4.3No exploitEPSS 1%

    sphider · sphiderFeb 23, 2007

  • CVE-2008-5211
    11Monitor

    Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled, allows remote attack

    LowCVSS 2.6Proof of conceptEPSS 2%

    sphider · sphiderNov 24, 2008