CVE-2020-37218 Joomla com_hdwplayer 4.2 SQL Injection via search.php

Joomla comhdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hdwplayersearch parameter. Attackers can submit POST requests with crafted SQL payloads in the...

Joomla! com_hdwplayer 'search.php' SQL Injection Vulnerability

Joomla! is an open source content management system CMS. An SQL vulnerability exists in Joomla! comhdwplayer 'search.php'. An attacker can exploit the vulnerability to obtain sensitive information...