exploitDog

CVE-2019-9618

Опубликовано: 13 мая 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Высокий

Описание

The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter.

Ссылки

http://seclists.org/fulldisclosure/2019/Mar/26
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2019/Mar/32
Mailing List
Third Party Advisory
https://wordpress.org/plugins/gracemedia-media-player/#developers
Release Notes
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9234
http://seclists.org/fulldisclosure/2019/Mar/26
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2019/Mar/32
Mailing List
Third Party Advisory
https://wordpress.org/plugins/gracemedia-media-player/#developers
Release Notes
Third Party Advisory
https://wpvulndb.com/vulnerabilities/9234

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gracemedia_media_player_project:gracemedia_media_player:1.0:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 99%

0.87599

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-pw77-5cwc-848f

github

больше 3 лет назад

The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter.

EPSS

Процентиль: 99%

0.87599

Высокий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22