CVE-2015-4351
The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a craft…
Published: 2015-06-15 · CVSS: Unscored
The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7