PT-2020-7703
CVE-2014-5086
·
تاريخ النشر
2020-02-10
·
تاريخ التحديث
2021-09-09
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Sphider Pro version 3.2
Sphider Plus version 3.2
Description
A Command Execution issue exists due to insufficient sanitization of
fwrite to conf.php, which could let a remote malicious user execute arbitrary code.Recommendations
For Sphider Pro version 3.2, consider disabling the
fwrite function to conf.php until a patch is available.
For Sphider Plus version 3.2, restrict access to the conf.php file to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾