Lucene search
HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4351
cve-2015-4351
spider video player
drupal
remote authenticated users
delete arbitrary files
6.5 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
0.003 Low
EPSS
Percentile
65.0%
The Spider Video Player module for Drupal allows remote authenticated users with the “access Spider Video Player administration” permission to delete arbitrary files via a crafted URL.
| CPE | Name | Operator | Version |
|---|---|---|---|
| web-dorado:web-dorado_spider_video_player | web-dorado web-dorado spider video player | eq | * |
Related
prion
prion
Code injection
2015-06-15 14:59:00
cvelist
cvelist
CVE-2015-4351
2015-06-15 14:00:00
drupal
drupal
6.5 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
0.003 Low
EPSS
Percentile
65.0%
Related for CVE-2015-4351