PT-2018-17267

Name of the Vulnerable Software and Affected Versions: Gallery WD version 1.3.6 Description: A SQL Injection issue exists in the Gallery WD component for Joomla!, which can be exploited via the tag id parameter or the gallery id parameter. Recommendations: For Gallery WD version 1.3.6, avoid usin...

CVE-2018-5981: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tagid parameter or galleryid parameter...

Joomla! Component Gallery WD 1.3.6 - SQL Injection

Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/ Software Download:...

Joomla! Component Gallery WD 1.3.6 - SQL Injection

Joomla! Component Gallery WD 1.3.6 - SQL Injection Exploit Title: Joomla! Component Gallery WD 1.3.6 - SQL Injection Dork: N/A Date: 16.02.2018 Vendor Homepage: https://web-dorado.com/ Software Link: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd/ Software...

Western Digital MyCloud Unauthenticated File Upload

The remote WD MyCloud device is affected by a file upload vulnerability that allows a remote attacker to upload and execute files. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid105732; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2017-17733

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

CVE-2017-17733: Undefined Security Weakness

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request...

PT-2017-14974

Name of the Vulnerable Software and Affected Versions Maccms versions 8.x Description The issue allows remote command execution via the wd parameter in an "index.php?m=vod-search" request. Recommendations For Maccms version 8.x, avoid using the wd parameter in the "index.php?m=vod-search" request...

MacCMS Command Execution Vulnerability

Maccms is a cross-platform PHP and MySQL based rapid site building system. A security vulnerability exists in Maccms 8.x version. The vulnerability can be exploited by remote attackers to execute commands with the help of the 'wd' parameter in the index.php?m=vod-search request...

Western Digital My Cloud Products Authentication Bypass and Remote Command Injection Vulnerability

Western Digital My Cloud Products are prone to an authentication bypass and multiple remote command injection vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Western Digital TV Multiple Vulnerabilities

The remote WD TV device is affected by multiple vulnerabilities including arbitrary file upload, local file inclusion, and SQL injection. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103050; scriptversion"1.5"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2017-12977

CVE-2017-12977 affects the Web-Dorado Photo Gallery by WD – Responsive Photo Gallery WordPress plugin prior to 1.3.51. The vulnerability is a SQL injection in bwg_edit_tag() (photo-gallery.php) and edit_tag() (admin/controllers/BWGControllerTags_bwg.php) that is exploitable by administrators via ...

CVE-2017-12977: Improper Neutralization of Special Elements used in an SQL Command

The Web-Dorado "Photo Gallery by WD - Responsive Photo Gallery" plugin before 1.3.51 for WordPress has a SQL injection vulnerability related to bwgedittag in photo-gallery.php and edittag in admin/controllers/BWGControllerTagsbwg.php. It is exploitable by administrators via the tagid parameter...

PT-2017-12815

Name of the Vulnerable Software and Affected Versions Photo Gallery by WD - Responsive Photo Gallery versions prior to 1.3.51 Description The issue is related to a SQL injection vulnerability. It is associated with the bwg edit tag function in photo-gallery.php and the edit tag function in...

Cross site scripting

Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2224

Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2224

Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2224

The CVE-2017-2224 vulnerability affects the WordPress plugin Event Calendar WD (Web-Dorado). It is a cross-site scripting (XSS) flaw in versions prior to 1.0.94 (notably

PT-2017-15273

Name of the Vulnerable Software and Affected Versions Event Calendar WD versions prior to 1.0.94 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 1.0.94, update to version 1.0.94 or later to resolve the...

CVE-2017-2224: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...