CVE-2015-7527

ALTO 7.5CVE-2015-7527 · Published 17/12/2015 · updated 17/06/2026

In breve

CVE-2015-7527 è una vulnerabilità ALTO (CVSS 7.5) che riguarda cool video gallery (cool video gallery project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.2%, superiore al 92.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
cool video gallery cool_video_gallery_project	`= 1.9`	No fix yet

Description

lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page.

References

packetstormsecurity.com/files/134626/WordPress-Cool-Video-Gallery-1.9-Command-Injection.html · Exploit
openwall.com/lists/oss-security/2015/12/02/9 · Exploit
securityfocus.com/archive/1/537051/100/0/threaded
vapidlabs.com/advisory.php · Exploit
wordpress.org/support/topic/command-injection-vulnerability-in-v19 · Exploit
wpvulndb.com/vulnerabilities/8348

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free