3 matches found
Sql injection
SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...
7.5CVSS9.9AI score0.02166EPSS
SaveExploits5References1Affected Software1
CVE-2018-5981
SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...
9.8CVSS9.9AI score0.02166EPSS
SaveExploits5References1
Sql injection
The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwgedittag in photo-gallery.php and edittag in admin/controllers/BWGControllerTagsbwg.php. It is exploitable by administrators via the tagid parameter...
6.5CVSS7.3AI score0.01255EPSS
SaveExploits0References2Affected Software1
20