CVE-2015-7527 in Cool Video Gallery Plugin

Résumé

par MITRE

lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 29/09/2015
• Divulgation: 17/12/2015
• Modérer: accepté
• Entrée: VDB-79842
• CPE: prêt
• CWE: CWE-20 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.05232
• KEV: non
• Activités: très faible
• Secteur: Agriculture, Police, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-7527
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-7527
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-7527/