CVE-2014-5082 in Sphider

Resumen (Inglés)

Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers to execute arbitrary SQL commands via the (1) site_id or (2) url parameter.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

2014-07-24

Divulgación

2014-08-06

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
70538	Sphider inyección SQL	89	Prueba de concepto	No está definido	CVE-2014-5082

Fuentes

• MITRE
• NVD
• CVE Details