PT-2023-9948 · Unknown · Hd Flv Player Plugin

CVE-2012-10011 · Publicado 2023-04-09 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HD FLV Player Plugin versions up to 1.7

Description A critical issue has been found in the HD FLV Player Plugin, affecting the function hd add media/hd update media of the file functions.php. The manipulation of the argument name leads to SQL injection. This issue can be exploited remotely.

Recommendations For HD FLV Player Plugin versions up to 1.7, upgrade to version 1.8 to address this issue. As a temporary workaround, consider restricting access to the hd add media/hd update media function in the functions.php file until the upgrade is applied.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2012-10011

Produtos afetados

Hd Flv Player Plugin

Referências · 5

• https://t.me/cvenotify/47858 · Publicação no Telegram
• https://github.com/wp-plugins/contus-hd-flv-player/commit/34d66b9f3231a0e2dc0e536a6fe615d736e863f7 · Correção
• https://vuldb.com/?id.225350 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-10011 · Nota de Segurança
• https://vuldb.com/?ctiid.225350 · Nota