CVE-2015-7527 in Cool Video Gallery Plugin

सारांश

द्वारा MITRE

lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• आरक्षित करना: 29/09/2015
• प्रकटीकरण: 17/12/2015
• संयम: स्वीकृत
• प्रविष्टि: VDB-79842
• CPE: तैयार
• CWE: CWE-20 (पुष्टि की गई)
• CVSS: 7.5 (NVD)
• EPSS: 0.05232
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Lawfirm, Police, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-7527
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-7527
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-7527/