Sphinxsearch

Sphinx

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2020-29050

Exploit
  • EPSS 0.71%
  • Published 10.01.2022 14:10:16
  • Last modified 21.11.2024 05:23:35

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc dire...

7.5

CVE-2019-14511

Exploit
  • EPSS 0.75%
  • Published 22.08.2019 13:15:12
  • Last modified 21.11.2024 04:26:52

Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet (unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only).