Vulnerabilities

TI-2015-03650 CVE-2015-4352 · GHSA-fp27-h42r-244q

Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for…

LOW 27

Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete videos via unspecified vectors.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00636 Published 2015-06-15 No fix listed CWE-352

TI-2015-03649 CVE-2015-4351 · GHSA-cqqm-4g2v-qjrj

The Spider Video Player module for Drupal allows remote authenticated users with the…

LOW 25

The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL.

CVSS 2.0MEDIUM 4.9 Network Low privileges Interaction — EPSS 0.01055 Published 2015-06-15 No fix listed CWE-264

TI-2014-07049 CVE-2014-8584 · GHSA-x788-5vx8-9q9h

Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka…

LOW 24

Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka WordPress Video Player) plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01894 Published 2014-11-04 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in the Spider Video Player module for…

The Spider Video Player module for Drupal allows remote authenticated users with the…

Cross-site scripting (XSS) vulnerability in the Web Dorado Spider Video Player (aka…