« Volver al listado

CVE-2012-1785

Estado: ModificadaAlta (7.5)—

kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Kylegilman — Video Embed & Thumbnail Generator

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-1785",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-03-19T18:55:03.313",
  "references": [
    {
      "url": "http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&old=507924&new_path=%2Fvideo-embed-thumbnail-generator&new=507924",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/48087",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/52180",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73508",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://plugins.trac.wordpress.org/changeset?old_path=%2Fvideo-embed-thumbnail-generator&old=507924&new_path=%2Fvideo-embed-thumbnail-generator&new=507924",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/48087",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://wordpress.org/extend/plugins/video-embed-thumbnail-generator/changelog/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/52180",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73508",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "kg_callffmpeg.php in the Video Embed & Thumbnail Generator plugin before 2.0 for WordPress allows remote attackers to execute arbitrary commands via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "kg_callffmpeg.php en el complemento de Wordpress \"Video Embed & Thumbnail Generator\" antes de v2.0 permite a atacantes remotos ejecutar comandos de su elección a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-16T23:40:18.247",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C989F18-D9AC-44BE-BCA1-3F5C49160DF6",
              "versionEndIncluding": "1.1"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EBC2076-AA14-4E18-8851-94AC7AB6C084"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:0.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3685E933-F049-4961-8151-65ED2EAB3085"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9490138-6C21-42DA-B29B-B83D7C7B6B20"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "15CDBA22-9614-4AFC-BA2A-8E6D21C7CAEA"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89E4C329-E20A-4849-AB41-4A45B8AFE0D2"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5755FA68-3576-44D7-B8FA-7BE656DB5250"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "30621B6E-385F-4C19-984B-7C1227BCFDFF"
            },
            {
              "criteria": "cpe:2.3:a:kylegilman:video_embed_\\&_thumbnail_generator:1.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E2FB9A0-FBBF-4A47-A659-CA3B2CEEABD8"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "847DA578-4655-477E-8A6F-99FBE738E4F9"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}