CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

Sql injection

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

CVE-2018-5981

The CVE-2018-5981 vulnerability affects Gallery WD (Web Dorado) for Joomla!, specifically versions up to 1.3.6 (with evidence also citing 1.3.9 as affected and updates to 1.3.10). It is a SQL Injection in the Gallery WD 1.3.6 component exploitable via the tag_id or gallery_id parameters, enabling...

CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

Joomla! Gallery WD 1.3.6 SQL Injection

Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/ Software Download:...

CVE-2018-5981: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

Joomla Gallery WD 1.3.6 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection Vendor Homepage: https://web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/ Software Download:...

PT-2018-17267

Name of the Vulnerable Software and Affected Versions: Gallery WD version 1.3.6 Description: A SQL Injection issue exists in the Gallery WD component for Joomla!, which can be exploited via the tag id parameter or the gallery id parameter. Recommendations: For Gallery WD version 1.3.6, avoid usin...

Joomla! Component Gallery WD 1.3.6 - SQL Injection

Joomla! Component Gallery WD 1.3.6 - SQL Injection Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/ Software...

Joomla! Component Gallery WD 1.3.6 - SQL Injection

Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/ Software Download:...

Western Digital MyCloud Unauthenticated File Upload

The remote WD MyCloud device is affected by a file upload vulnerability that allows a remote attacker to upload and execute files. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105732; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2017-17733

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

PT-2017-14974

Name of the Vulnerable Software and Affected Versions Maccms versions 8.x Description The issue allows remote command execution via the wd parameter in an "index.php?m=vod-search" request. Recommendations For Maccms version 8.x, avoid using the wd parameter in the "index.php?m=vod-search" request...

MacCMS Command Execution Vulnerability

Maccms is a cross-platform PHP and MySQL based rapid site building system. A security vulnerability exists in Maccms 8.x version. The vulnerability can be exploited by remote attackers to execute commands with the help of the 'wd' parameter in the index.php?m=vod-search request...

CVE-2017-17733: Undefined Security Weakness

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

Western Digital My Cloud Products Authentication Bypass and Remote Command Injection Vulnerability

Western Digital My Cloud Products are prone to an authentication bypass and multiple remote command injection vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Western Digital TV Multiple Vulnerabilities

The remote WD TV device is affected by multiple vulnerabilities including arbitrary file upload, local file inclusion, and SQL injection. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103050; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2017-12977

CVE-2017-12977 affects the Web-Dorado Photo Gallery by WD – Responsive Photo Gallery WordPress plugin prior to 1.3.51. The vulnerability is a SQL injection in bwg_edit_tag() (photo-gallery.php) and edit_tag() (admin/controllers/BWGControllerTags_bwg.php) that is exploitable by administrators via ...

PT-2017-12815

Name of the Vulnerable Software and Affected Versions Photo Gallery by WD - Responsive Photo Gallery versions prior to 1.3.51 Description The issue is related to a SQL injection vulnerability. It is associated with the bwg edit tag function in photo-gallery.php and the edit tag function in...

CVE-2017-12977: Improper Neutralization of Special Elements used in an SQL Command

The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwgedittag in photo-gallery.php and edittag in admin/controllers/BWGControllerTagsbwg.php. It is exploitable by administrators via the tagid parameter...