Lucene search
K

4 matches found

EUVD
EUVD
added 2026/05/13 6:30 p.m.7 views

EUVD-2020-31219

Joomla comhdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hdwplayersearch parameter. Attackers can submit POST requests with crafted SQL payloads in the...

8.8CVSS6.1AI score0.0009EPSS
Exploits0References5
NVD
NVD
added 2026/05/13 4:16 p.m.4 views

CVE-2020-37218

Joomla comhdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hdwplayersearch parameter. Attackers can submit POST requests with crafted SQL payloads in the...

8.8CVSS0.0009EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/05/13 2:22 p.m.3 views

CVE-2020-37218

Joomla comhdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hdwplayersearch parameter. Attackers can submit POST requests with crafted SQL payloads in the...

8.8CVSS6.1AI score0.0009EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2026/05/13 12:0 a.m.5 views

HDWPlayer Joomla com_hdwplayer SQL注入漏洞

HDWPlayer Joomla comhdwplayer is a Joomla video player component developed by HDWPlayer Inc. Version 4.2 of HDWPlayer Joomla comhdwplayer contains a SQL injection vulnerability. This vulnerability stems from an SQL injection issue in the search.php file. It may allow unauthenticated attackers to...

8.8CVSS6.2AI score0.0009EPSS
Exploits0References1
Rows per page
Query Builder