CVE-2015-7527

lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page...

CVE-2015-7527

CVE-2015-7527 affects the WordPress plugin Cool Video Gallery (version 1.9 and earlier). The issue is a remote command-injection vulnerability in lib/core.php, where user-supplied input (notably the "Width of preview image" on the Video Gallery Settings page) can be used to inject shell commands ...

CVE-2015-7527

lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page...

WordPress Cool Video Gallery 1.9 Command Injection

Title: Command Injection in cool-video-gallery v1.9 Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-11-29 Download Site: https://wordpress.org/plugins/cool-video-gallery/ Vendor: https://profiles.wordpress.org/praveen-rajan/ Vendor Notified: 2015-11-30 Vendor Contact:...

CVE-2014-7527

The CVE-2014-7527 entry concerns The Savage Nation Mobile Web (com.wSavageNation) for Android, version 0.57.13354.63350. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information vi...