A Command Execution vulnerability exists in Sphider before 1.3.6 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5083 pertains to instances of fwrite in Sphider.
security update
https://security-tracker.debian.org/tracker/DSA-5527-2
https://security-tracker.debian.org/tracker/DSA-5557-1