CVE-2020-29050

SphinxSearch in Sphinx Technologies Sphinx through 3.1.1 allows directory traversal (in conjunction with CVE-2019-14511) because the mysql client can be used for CALL SNIPPETS and load_file operations on a full pathname (e.g., a file in the /etc directory). NOTE: this is unrelated to CMUSphinx.

• CWE-22

• https://blog.wirhabenstil.de/2019/08/19/sphinxsearch-0-0-0-09306-cve-2019-14511/Exploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/01/msg00009.htmlMailing List, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-29050Third Party Advisory
• https://blog.wirhabenstil.de/2019/08/19/sphinxsearch-0-0-0-09306-cve-2019-14511/Exploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/01/msg00009.htmlMailing List, Third Party Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-29050Third Party Advisory

Published

Jan 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-29041A misconfiguration in Web-Sesame 2020.1.1.3375 allows an una…5.3
• CVE-2020-29042An issue was discovered in BigBlueButton through 2.2.29. A b…3.7
• CVE-2020-29043An issue was discovered in BigBlueButton through 2.2.29. Whe…7.5
• CVE-2020-29045The food-and-drink-menu plugin through 2.2.0 for WordPress a…9.8
• CVE-2020-29047The wp-hotel-booking plugin through 1.10.2 for WordPress all…9.8
• CVE-2020-2905Vulnerability in the Oracle VM VirtualBox product of Oracle …8.2
• CVE-2020-29053HRSALE 2.0.0 allows XSS via the admin/project/projects_calen…6.1
• CVE-2020-29054An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408…9.8
• CVE-2020-29055An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408…5.9
• CVE-2020-29056An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408…9.8
• CVE-2020-29057An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408…7.5
• CVE-2020-29058An issue was discovered on CDATA 72408A, 9008A, 9016A, 92408…9.8