PT-2020-7701
CVE-2014-5084
·
Published
2020-02-10
·
Updated
2021-08-16
Description by
CVSS 2.0
6.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Sphider Pro version 3.2
Description
A Command Execution issue exists due to insufficient sanitization of
fwrite, which could let a remote malicious user execute arbitrary code.Recommendations
For Sphider Pro version 3.2, consider disabling the use of
fwrite until a patch is available to prevent potential code execution. Found an issue in the description? Have something to add? Feel free to write us 👾