sphider before 1.3.6, sphider-pro before 3.2, and sphider-plus before 3.2 allow authentication bypass
sphider sphider
sphiderpro sphider pro
sphider-plus sphider-plus