PT-2020-7699 · Unknown+1 · Sphider Plus+2

R1Pplex · Published 2020-01-10 · Updated 2021-08-16 · CVE-2014-5081

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sphider versions prior to 1.3.6 Sphider-pro versions prior to 3.2 Sphider-plus versions prior to 3.2

Description The issue allows authentication bypass.

Recommendations For Sphider versions prior to 1.3.6, update to version 1.3.6 or later. For Sphider-pro versions prior to 3.2, update to version 3.2 or later. For Sphider-plus versions prior to 3.2, update to version 3.2 or later.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2014-5081

Affected Products

Sphider

Sphider Plus

Sphider Pro

References · 3

• 🔥 http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html · Exploit
• 🔥 https://exploit-db.com/exploits/34238 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5081 · Security Note