755
VMScore

CVE-2019-9618

Published: 13/05/2019 Updated: 24/08/2020
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gracemedia media player project gracemedia media player 1.0

Exploits

============================================= MGC ALERT 2019-001 - Original release date: February 06, 2019 - Last revised: March 13, 2019 - Discovered by: Manuel García Cárdenas - Severity: 7/10 (CVSS Base Score) - CVE-ID: CVE-2019-9618 ============================================= I VULNERABILITY ------------------------- WordPress Plugin Gr ...
WordPress GraceMedia Media Player plugin version 10 suffers from a local file inclusion vulnerability ...

Mailing Lists

<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> Re: WordPress Plugin GraceMedia Media Player 10 - Local File Inclusion <!--X-Subject-Header-End--> <!--X-Head-of-Mess ...
<!--X-Body-Begin--> <!--X-User-Header--> Full Disclosure mailing list archives <!--X-User-Header-End--> <!--X-TopPNI--> By Date By Thread </form> <!--X-TopPNI-End--> <!--X-MsgBody--> <!--X-Subject-Header-Begin--> WordPress Plugin GraceMedia Media Player 10 - Local File Inclusion <!--X-Subject-Header-End--> <!--X-Head-of-Message- ...