CVE-2015-4351

The Spider Video Player module for Drupal allows remote authenticated users with the "access Spider Video Player administration" permission to delete arbitrary files via a crafted URL.

Date published : 2015-06-15

http://www.securityfocus.com/bid/72817

https://www.drupal.org/node/2437981