Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Web-dorado Subscribe
Filtered by product Web-dorado Spider Video Player
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-4351 1 Web-dorado 1 Web-dorado Spider Video Player 2016-06-09 4.9 MEDIUM N/A
The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL.
CVE-2015-4352 1 Web-dorado 1 Web-dorado Spider Video Player 2016-06-09 5.8 MEDIUM N/A
Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors.
CVE-2014-8584 1 Web-dorado 1 Web-dorado Spider Video Player 2014-12-11 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress Video Player) plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.