critical10.0Public exploit code
CVE-2014-8877
The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin CM Download Manager 2.0.0 - Code Injection2014-11-22 · webapps · php
Impact
The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows remote attackers to execute arbitrary PHP code via the CMDsearch parameter to cmdownloads/, which is processed by the PHP create_function function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Creative Minds | Cm Download Manager | through 2.0.3 Versions 2.0.0, 2.0.1, 2.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/129183/WordPress-CM-Download-Manager-2.0.0-Code-Injection.html
- http://www.itas.vn/news/code-injection-in-cm-download-manager-plugin-66.html
- http://www.securityfocus.com/archive/1/534037/100/0/threaded
- http://www.securityfocus.com/bid/71204
- https://downloadsmanager.cminds.com/release-notes/
- http://packetstormsecurity.com/files/129183/WordPress-CM-Download-Manager-2.0.0-Code-Injection.html
- http://www.itas.vn/news/code-injection-in-cm-download-manager-plugin-66.html
- http://www.securityfocus.com/archive/1/534037/100/0/threaded
- http://www.securityfocus.com/bid/71204
- https://downloadsmanager.cminds.com/release-notes/