Sphider Plus is a web search engine and site indexing platform with a narrowly scoped product footprint. Live severity, exploitation, and vulnerability counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Sphider Plus over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-5081CRITICAL sphider prior to 1.3.6, sphider-pro prior to 3.2, and sphider-plus prior to 3.2 allow authentication bypass | Jan 10, 2020 | 9.8 | 45 | NO | YES |
CVE-2014-5087CRITICAL A vulnerability exists in Sphider Search Engine prior to 1.3.6 due to exec calls in admin/spiderfuncs.php, which could let a remote malicious user execute arbitrary code. | Feb 7, 2020 | 9.8 | 44 | NO | YES |
CVE-2014-5086HIGH A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execut | Feb 10, 2020 | 8.8 | 42 | NO | YES |
CVE-2014-5085HIGH A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. | Feb 10, 2020 | 8.8 | 38 | NO | YES |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Sphider Plus.
Media articles that mention a CVE ID that affects a product developed by Sphider Plus — matched by CVE ID, not by vendor name.