CVE-2015-7527 in Cool Video Gallery Plugin

摘要

由 MITRE

lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 预定: 2015-09-29
• 披露: 2015-12-17
• 管理: 已接受
• 条目: VDB-79842
• CPE: 准备好
• CWE: CWE-20 (已确认)
• CVSS: 7.5 (NVD)
• EPSS: 0.05232
• KEV: 否
• 活动: 非常低
• 部门: Police, Agriculture, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-7527
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-7527
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-7527/