İçeriğe atla
Noroxi

sphider kayıtları

sphider üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
6
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

14 kayıt
  • CVE-2014-5081
    42Planlayın

    sphider prior to 1.3.6, sphider-pro prior to 3.2, and sphider-plus prior to 3.2 allow authentication bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    sphider · sphider10 Oca 2020

  • CVE-2014-5087
    41Planlayın

    A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote maliciou

    KritikCVSS 9,8Kavram kanıtıEPSS %7

    sphider · sphider7 Şub 2020

  • CVE-2014-5086
    38İzleyin

    A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which

    YüksekCVSS 8,8Kavram kanıtıEPSS %10

    sphider · sphider10 Şub 2020

  • CVE-2014-5083
    37İzleyin

    A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a r

    YüksekCVSS 8,8Kavram kanıtıEPSS %6

    sphider · sphider10 Şub 2020

  • CVE-2007-2411
    31İzleyin

    PHP remote file inclusion vulnerability in index.php in Sphider 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the

    YüksekCVSS 7,5İstismar yokEPSS %3

    sphider · sphider1 May 2007

  • CVE-2014-5082
    31İzleyin

    Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    sphider · sphider6 Ağu 2014

  • CVE-2014-5192
    30İzleyin

    SQL injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to execute arbitrary SQL commands via the filter par

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    sphider · sphider7 Ağu 2014

  • CVE-2006-7057
    30İzleyin

    SQL injection vulnerability in search.php in Sphider before 1.3.1c allows remote attackers to execute arbitrary SQL commands via the categor

    YüksekCVSS 7,5İstismar yokEPSS %1

    sphider · sphider23 Şub 2007

  • CVE-2014-5194
    27İzleyin

    Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into

    OrtaCVSS 6,5Kavram kanıtıEPSS %4

    sphider · sphider7 Ağu 2014

  • CVE-2006-2506
    27İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in search.php in Sphider allow remote attackers to inject arbitrary web script or HTML v

    OrtaCVSS 6,8İstismar yokEPSS %2

    sphider · sphider22 May 2006

  • CVE-2006-1784
    22İzleyin

    PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disabled, allows remote

    OrtaCVSS 5,1Kavram kanıtıEPSS %8

    sphider · sphider13 Nis 2006

  • CVE-2014-5193
    18İzleyin

    Cross-site scripting (XSS) vulnerability in admin/admin.php in Sphider 1.3.6 allows remote attackers to inject arbitrary web script or HTML

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    sphider · sphider7 Ağu 2014

  • CVE-2006-7058
    17İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Sphider before 1.3.1c allow remote attackers to inject arbitrary web script or HTML v

    OrtaCVSS 4,3İstismar yokEPSS %1

    sphider · sphider23 Şub 2007

  • CVE-2008-5211
    11İzleyin

    Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled, allows remote attack

    DüşükCVSS 2,6Kavram kanıtıEPSS %2

    sphider · sphider24 Kas 2008