Inclusion of Functionality from Untrusted Control Sphere

CVE-2012-4919

High

9.8/10

Summary

Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: HIGH
Availability Impact: HIGH

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

The software imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

References

Advisory Timeline

Published Jan 22, 2020

Inclusion of Functionality from Untrusted Control Sphere

CVE-2012-4919

Summary

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS