Approved changes feed: RSS · Atom

cpe:2.3:a:sphider-plus:sphider-plus:3.2:*:*:*:*:*:*:*

part: a version: 3.2 update: *

VendorSphider Plus (d223bfe5-6451-5f7c-bbed-f9ba4afb4d6a)
ProductSphider Plus (19ade4e0-78ff-5e38-ae67-3d61bcb955c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:sourceforge/sphiderplus purl2cpe 2026-06-01 10:11:56.892208

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-5085 vulnerable 2026-06-08 05:05:46.819976 Details available
A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5085 pertains to instances of fwrite in Sphider Plus, but do not exist in either Sphider or Sphider Pro.
Published: 2020-02-10T14:16:05.000Z
Updated: 2024-08-06T11:34:37.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.