CVE-2014-5083: Sphider

High severity, CVSS 8.8. EPSS: 5.8% chance of exploitation in the next 30 days.

A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5083 pertains to instances of fwrite in Sphider.

Affected products

• Sphider Sphider: before 1.3.6 (fixed in 1.3.6)

Published 2020-02-10. Last modified 2026-06-17.