Web-dorado Spider Video Player Security Vulnerabilities and Issues — Web-dorado Spider Video Player CVE List

Lucene search

Web-doradoWeb-dorado Spider Video Player

2 matches found

CVE•added 2015/06/15 2:59 p.m.•36 views

CVE-2015-4351

The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL.

4.9CVSS6.5AI score0.00752EPSS

CVE•added 2015/06/15 2:59 p.m.•32 views

CVE-2015-4352

Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors.

5.8CVSS7.3AI score0.00126EPSS