PT-2019-13846 · Fv Flowplayer · Fv Flowplayer Video Player

M0Ze

+1

·

Publicado

2019-08-09

·

Atualizado

2019-08-14

·

CVE-2019-14801

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions FV Flowplayer Video Player plugin versions prior to 7.3.15.727
Description The issue allows for SQL injection in the email subscription functionality.
Recommendations For versions prior to 7.3.15.727, update to version 7.3.15.727 or later to resolve the issue.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-14801

Produtos afetados

Fv Flowplayer Video Player