CVE-2014-5194 in Sphider
Résumé (Anglaise)
Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into settings/conf.php via the _word_upper_bound parameter.
Réserver
07/08/2014
Divulgation
07/08/2014
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 70576 | Sphider élévation de privilèges | 94 | Preuve de concept | Non défini | CVE-2014-5194 |