CVE-2014-5085: Sphider-Plus

High severity, CVSS 8.8. EPSS: 5.8% chance of exploitation in the next 30 days.

A Command Execution vulnerability exists in Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5085 pertains to instances of fwrite in Sphider Plus, but do not exist in either Sphider or Sphider Pro.

Affected products

• Sphider-Plus Sphider-Plus: version 3.2 only

Published 2020-02-10. Last modified 2026-06-17.