| Package | Affected versions | Patched versions |
|---|---|---|
| sphider | = 1.3= 1.3_rc1= 1.3_rc2 |
PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the settings_dir parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free