CVE-2014-5194

Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into settings/conf.php…

published August 7, 2014

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into settings/conf.php via the _word_upper_bound parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04206 · 90.9th percentile
Published
2014-08-07T10:00Z
EPSS history
Timeline
  • 07 AUG 10:00Z
    Static code injection vulnerability in admin/admin.php in Sphider 1.3.6 allows remote authenticated users to inject arbitrary PHP code into settings/conf.php…
    cvelistv5