CVE:CVE-2014-5081
CNNVD:CNNVD-202001-377
sphider 1.3.6之前版本、sphider-pro 3.2之前版本和sphider-plus 3.2之前版本中存在安全漏洞。攻击者可利用该漏洞绕过身份验证。
solution:Upgrade sphider sphider to a higher version than 1.3.6,and avoid the version (,1.3.6); Upgrade sphiderpro sphider_pro to a higher version than 3.2,and avoid the version (,3.2); Upgrade sphider-plus sphider-plus to a higher version than 3.2,and avoid the version (,3.2)