2 matches found
Code injection
The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows remote attackers to execute arbitrary PHP code via the CMDsearch parameter to cmdownloads/, which is processed by the PHP createfunction...
10CVSS8.1AI score0.14373EPSS
SaveExploits6References5Affected Software1
CVE-2014-8877: Improper Control of Generation of Code
The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows remote attackers to execute arbitrary PHP code via the CMDsearch parameter to cmdownloads/, which is processed by the PHP createfunction...
10CVSS6.4AI score0.14373EPSS
SaveExploits6References2
20