Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin CM Download Manager Code Injection - CVE-2014-8877 - Vulnerability Database
WP Plugin Cm Download Manager

WordPress Plugin CM Download Manager Code Injection - CVE-2014-8877

Critical
Reference: CVE-2014-8877
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-8877
Title: WordPress Plugin CM Download Manager Code Injection
Overview:

WordPress Plugin CM Download Manager is prone to a vulnerability that lets remote attackers inject and execute arbitrary code because the application fails to sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary code within the context of the affected webserver process this may result in total compromise of the web server. WordPress Plugin CM Download Manager version 2.0.3 is vulnerable prior versions may also be affected.