Improper input validation in Awingsoft Awakening Winds3d Viewer Plugin
CVE-2009-2386
Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.051 (91.5th percentile) — read the EPSS interpretation.
Affected products
- Awingsoft Awakening_winds3d_viewer_plugin — versions 3.0.0.5, 3.5.0.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (Exploit, x_refsource_MISC)