CVE-2018-5981

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

Joomla! Gallery WD 1.3.6 SQL Injection

Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/ Software Download:...

Joomla Gallery WD 1.3.6 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection Vendor Homepage: https://web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/ Software Download:...

Joomla! Component Gallery WD 1.3.6 - SQL Injection

Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/ Software Download:...

Joomla! Component Gallery WD 1.3.6 - SQL Injection

Joomla! Component Gallery WD 1.3.6 - SQL Injection Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/ Software...

Western Digital MyCloud Unauthenticated File Upload

The remote WD MyCloud device is affected by a file upload vulnerability that allows a remote attacker to upload and execute files. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105732; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2017-17733

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

MacCMS Command Execution Vulnerability

Maccms is a cross-platform PHP and MySQL based rapid site building system. A security vulnerability exists in Maccms 8.x version. The vulnerability can be exploited by remote attackers to execute commands with the help of the 'wd' parameter in the index.php?m=vod-search request...

Western Digital My Cloud Products Authentication Bypass and Remote Command Injection Vulnerability

Western Digital My Cloud Products are prone to an authentication bypass and multiple remote command injection vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Western Digital TV Multiple Vulnerabilities

The remote WD TV device is affected by multiple vulnerabilities including arbitrary file upload, local file inclusion, and SQL injection. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103050; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2017-12977

CVE-2017-12977 affects the Web-Dorado Photo Gallery by WD – Responsive Photo Gallery WordPress plugin prior to 1.3.51. The vulnerability is a SQL injection in bwg_edit_tag() (photo-gallery.php) and edit_tag() (admin/controllers/BWGControllerTags_bwg.php) that is exploitable by administrators via ...

Cross site scripting

Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2224

Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2224

Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2224

The CVE-2017-2224 vulnerability affects the WordPress plugin Event Calendar WD (Web-Dorado). It is a cross-site scripting (XSS) flaw in versions prior to 1.0.94 (notably

WordPress Event Calendar WD Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Event Calendar WD is one of the calendar plugin. A cross-site scripting vulnerability exists in versions of the...

JVN#73550134: WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting

The WordPress plugin "Event Calendar WD" provided by Web-Dorado contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the developer...

Photo Gallery by WD <= 1.3.42 - Authenticated Path Traversal

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by an Authenticated Path Traversal security vulnerability...

Event Calendar WD <= 1.0.93 - Authenticated Cross-Site Scripting (XSS)

The Event Calendar WD – Responsive Event Calendar plugin WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

CVE-2017-2161

FlashAirTM SDHC Memory Card SD-WE Series V3.00.02 and earlier and FlashAirTM SDHC Memory Card SD-WD/WC Series V2.00.04 and earlier allows authenticated attackers to bypass access restrictions to obtain unauthorized image data via unspecified vectors...