CVE-2012-1785
Videopack (formerly Video Embed & Thumbnail Generator) < 2.0 - Remote Code Execution
Severity Score
7.2
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors.
kg_callffmpeg.php en el complemento de Wordpress "Video Embed & Thumbnail Generator" antes de v2.0 permite a atacantes remotos ejecutar comandos de su elección a través de vectores no especificados.
The Videopack (formerly Video Embed & Thumbnail Generator) plugin for WordPress is vulnerable to remote code execution in versions up to 2.0 due to insufficient input validation on data supplied to the runCom() function that executes code. This makes it possible for attackers to run arbitrary code on the system.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2012-02-20 CVE Published
- 2012-03-19 CVE Reserved
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog | X_refsource_confirm | |
| http://www.securityfocus.com/bid/52180 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/73508 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&old=507924&new_path=%2Fvideo-embed-thumbnail-generator&new=507924 | 2017-08-29 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/48087 | 2017-08-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Kylegilman Search vendor "Kylegilman" | Video Embed \& Thumbnail Generator Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" | <= 1.1 Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" and version " <= 1.1" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Kylegilman Search vendor "Kylegilman" | Video Embed \& Thumbnail Generator Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" | 0.2 Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" and version "0.2" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Kylegilman Search vendor "Kylegilman" | Video Embed \& Thumbnail Generator Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" | 0.2.1 Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" and version "0.2.1" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Kylegilman Search vendor "Kylegilman" | Video Embed \& Thumbnail Generator Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" | 1.0 Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" and version "1.0" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Kylegilman Search vendor "Kylegilman" | Video Embed \& Thumbnail Generator Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" | 1.0.1 Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" and version "1.0.1" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Kylegilman Search vendor "Kylegilman" | Video Embed \& Thumbnail Generator Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" | 1.0.2 Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" and version "1.0.2" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Kylegilman Search vendor "Kylegilman" | Video Embed \& Thumbnail Generator Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" | 1.0.3 Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" and version "1.0.3" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Kylegilman Search vendor "Kylegilman" | Video Embed \& Thumbnail Generator Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" | 1.0.4 Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" and version "1.0.4" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|
| Kylegilman Search vendor "Kylegilman" | Video Embed \& Thumbnail Generator Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" | 1.0.5 Search vendor "Kylegilman" for product "Video Embed \& Thumbnail Generator" and version "1.0.5" | - |
Affected
| in | Wordpress Search vendor "Wordpress" | Wordpress Search vendor "Wordpress" for product "Wordpress" | * | - |
Safe
|