CVEvulnerability
CVE-2015-7527
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-12-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page.
Affected configurations
• cool video gallery project cool video gallery 1.9
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://packetstormsecurity.com/files/134626/WordPress-Cool-Video-Gallery-1.9-Command-Injection.html Exploit
- http://www.openwall.com/lists/oss-security/2015/12/02/9 Exploit
- http://www.securityfocus.com/archive/1/537051/100/0/threaded www.securityfocus.com
- http://www.vapidlabs.com/advisory.php?v=158 Exploit
- https://wordpress.org/support/topic/command-injection-vulnerability-in-v19 Exploit
- https://wpvulndb.com/vulnerabilities/8348 wpvulndb.com
- http://packetstormsecurity.com/files/134626/WordPress-Cool-Video-Gallery-1.9-Command-Injection.html Exploit
- http://www.openwall.com/lists/oss-security/2015/12/02/9 Exploit
- http://www.securityfocus.com/archive/1/537051/100/0/threaded www.securityfocus.com
- http://www.vapidlabs.com/advisory.php?v=158 Exploit
- https://wordpress.org/support/topic/command-injection-vulnerability-in-v19 Exploit
- https://wpvulndb.com/vulnerabilities/8348 wpvulndb.com