Command Injection in cool-video-gallery v1.9 Wordpress plugin
CVE ID(s):
CVE-2015-7527
Notified: 2015-11-30
Description:
Cool Video Gallery is a Video Gallery plugin for WordPress with option to upload videos, attach media files, add Youtube videos and manage them in multiple galleries. Automatic preview image generation for uploaded videos using FFMPEG library available. Option provided to upload images for video previews. Supports '.flv', '.mp4', '.mov', '.m4v' and '.mp3' video files presently.
Exploit:
See attached screen shots.