cbcvebase.

Creative Minds Cm Download Manager vulnerabilities

1 known vulnerability affecting creative_minds/cm_download_manager.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2014-8877P2CRITICALCVSS 10.0PoC≤ 2.0.3v2.0.0+2 more2014-12-05
CVE-2014-8877 [CRITICAL] CWE-94 CVE-2014-8877: The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Do The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows remote attackers to execute arbitrary PHP code via the CMDsearch parameter to cmdownloads/, which is processed by the PHP create_function function.
nvd
Creative Minds Cm Download Manager vulnerabilities | cvebase