GCVE - cpe:2.3:a:sphider:sphider:1.3.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sphider:sphider:1.3.4:*:*:*:*:*:*:*

part: a version: 1.3.4 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/ameer1234567890/sphider`	purl2cpe	2026-06-01 10:18:07.376293
`pkg:github/ersin-demirtas/sphider`	purl2cpe	2026-06-01 10:18:07.376294
`pkg:sourceforge/sphider`	purl2cpe	2026-06-01 10:18:07.376295

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-5082`	vulnerable	2026-06-08 05:05:46.815197	Details available Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers to execute arbitrary SQL commands via the (1) site_id or (2) url parameter. Published: 2014-08-06T18:00:00.000Z Updated: 2024-08-06T11:34:37.206Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/127720/Sphider-Search-Engine-Command-Execution-SQL-Injection.html http://www.exploit-db.com/exploits/34189	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-5211`	vulnerable	2026-06-08 04:50:50.137702	Details available Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled, allows remote attackers to inject arbitrary web script or HTML via the query parameter, a different vector than CVE-2006-2506. Published: 2008-11-24T17:00:00.000Z Updated: 2024-08-07T10:49:11.981Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/42240 http://users.own-hero.net/~decoder/advisories/sphider134-xss.txt http://securityreason.com/securityalert/4629 http://secunia.com/advisories/30082 http://www.securityfocus.com/bid/29074	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.