shayan s vulnerabilities and exploits

(subscribe to this query)

A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5086 pertains to instances of fwrite in Sphider Pro and Sphider Plus only...

Sphider Sphider Sphider-plus Sphider-plus Sphiderpro Sphider Pro

1 EDB exploit

admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel.

Status2k Status2k -

1 EDB exploit

Status2k allows Remote Command Execution in admin/options/editpl.php.

Status2k Status2k

1 EDB exploit

Status2k allows remote malicious users to obtain configuration information via a phpinfo action in a request to status/index.php, which calls the phpinfo function.

Status2k Status2k -

1 EDB exploit

Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and previous versions, Sphider Pro, and Sphider-plus allow remote malicious users to execute arbitrary SQL commands via the (1) site_id or (2) url parameter.

Sphider Sphider Sphider Sphider 1.3.2 Sphider Sphider 1.3.3 Sphider Sphider 1.3.4 Sphider Sphider 1.3.5

2 EDB exploits

« PREV 1 2

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook