HOMEVULNERABILITIESVENDORSCreative Minds

Creative MindsCVEs & Vulnerabilities

1 CVEs affecting Creative Minds products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

cm download manager 4
CVE-2014-8877CRITICALpoc

The alterSearchQuery function in lib/controllers/CmdownloadController.php in the CreativeMinds CM Downloads Manager plugin before 2.0.4 for WordPress allows remote attackers to execute arbitrary PHP code via the CMDsearch parameter to cmdownloads/, which is processed by the PHP create_function function.

5 Dec 2014
10.0
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database