Lucene search
HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4351
cve-2015-4351
spider video player
drupal
remote authenticated users
delete arbitrary files
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.3%
The Spider Video Player module for Drupal allows remote authenticated users with the “access Spider Video Player administration” permission to delete arbitrary files via a crafted URL.
Affected configurations
Node
web-doradoweb-dorado_spider_video_playerdrupal
| CPE | Name | Operator | Version |
|---|---|---|---|
| web-dorado:web-dorado_spider_video_player | web-dorado web-dorado spider video player | eq | * |
Related
prion
prion
Code injection
2015-06-15 14:59:00
cvelist
cvelist
CVE-2015-4351
2015-06-15 14:00:00
nvd
nvd
CVE-2015-4351
2015-06-15 14:59:06
drupal
drupal
4.9 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
6.5 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
65.3%
Related for CVE-2015-4351