WordPress FAQ WD Plugin <= 1.0.14 - Cross Site Scripting

This WordPress plugin is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the plugin...

WD Photos - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application WD Photos published at the 'play' market has multiple vulnerabilities...

joomla 插件ECommerce-WD V1.2.5 参数filter_manufacturer_ids SQL注入漏洞

No description provided by source...

Joomla 组件Gallery WD SQL注入漏洞

0x01 漏洞简介 Joomla 组件Gallery WD存在多处SQL注入漏洞。远程攻击者可以利用该漏洞执行任意SQL指令。该插件的下载地址是： http://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd 0x02漏洞说明 2.1参数themeid存在GET型SQL注入漏洞 该漏洞利用的POC格式如下： index.php?option=comgallerywd&view=gallerybox&imageid=19&galleryid=2&themeid=1 AND...

Western Digital My Cloud Command Injection

Exploit Title: Western Digital My Cloud Command Injection Vendor Homepage: http://www.wdc.com Firmware tested: 04.01.03-421 and 04.01.04-422 for the Personal Cloud devices Firmware link: http://download.wdc.com/nas/sq-040104-422-20150423.deb.zip Exploit Author: James Sibley absane ; twitter =...

Western Digital My Cloud 04.01.03-421/04.01.04-422 - Command Injection

Exploit Title: Western Digital My Cloud Command Injection Vendor Homepage: http://www.wdc.com Firmware tested: 04.01.03-421 and 04.01.04-422 for the Personal Cloud devices Firmware link: http://download.wdc.com/nas/sq-040104-422-20150423.deb.zip Exploit Author: James Sibley absane ; twitter =...

wd-deo.gc.ca XSS vulnerability

Vulnerable URL: http://www.wd-deo.gc.ca/eng/42.asp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 16:51 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 750602 Google Pagerank| 7 VIP website status:| Yes Check...

PT-2015-1374

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS Java version 7.4 Description The issue is related to an XML external entity XXE vulnerability, which allows remote attackers to send TCP requests to intranet servers or have unspecified other impact via an XML request. This ca...

CVE-2015-4091: Undefined Security Weakness

XML external entity XXE vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to send TCP requests to intranet servers or possibly have unspecified other impact via an XML request to tcsldwdmain/Main, related to "CIM UPLOAD," aka SAP Security Note 2090851...

joomla gallery wd SQL注入漏洞

No description provided by source...

ECommerce-WD [com_ecommercewd],1.2.5, maybe earlier

ECommerce-WD comecommercewd,1.2.5, maybe earlier,SQL Injection developer statement This vulnerabilities are fixed in version 1.2.6 and above. The version 1.2.6 was released on 2015-03-18...

Joomla Gallery WD Component Multiple Parameter SQLi Vulnerability

The Joomla Gallery WD component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla Gallery WD - SQL Injection Vulnerability

Joomla Gallery WD - SQL Injection Vulnerability. Webapps exploit for php platform Exploit Title: Joomla Gallery WD - SQL Injection Vulnerability Google Dork: inurl:option=comgallerywd Date: 29.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor HomePage: http://web-dorado.com/ Source Component ...

Joomla Gallery WD SQL Injection

Exploit Title: Joomla Gallery WD - SQL Injection Vulnerability Google Dork: inurl:option=comgallerywd Date: 29.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor HomePage: http://web-dorado.com/ Source Component :...

Joomla! Component com_gallery_wd - SQL Injection

Exploit Title: Joomla Gallery WD - SQL Injection Vulnerability Google Dork: inurl:option=comgallerywd Date: 29.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor HomePage: http://web-dorado.com/ Source Component :...

Joomla Gallery WD - SQL Injection Vulnerability

Vendor HomePage: http://web-dorado.com/ Source Component : http://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd Google Dork: inurl:option=comgallerywd Date: 29.03.2015 Exploit Title: Joomla Gallery WD - SQL Injection Vulnerability Google Dork:...

CVE-2015-2562

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD comecommercewd component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 searchcategoryid, 2 sortorder, or 3 filtermanufacturerids in a displayproducts action to index.php...

CVE-2015-2562

The CVE-2015-2562 entry concerns the Web-Dorado ECommerce WD (com_ecommercewd) Joomla! component, version 1.2.5, with SQL injection in the displayproducts operation. The vulnerability allows unauthenticated remote attackers to inject SQL via the parameters search_category_id, sort_order, or filte...

CVE-2015-2562

Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD comecommercewd component 1.2.5 for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 searchcategoryid, 2 sortorder, or 3 filtermanufacturerids in a displayproducts action to index.php...

Joomla ECommerce-WD Plugin 1.2.5 - SQL Injection Vulnerabilities

Exploit for php platform in category web applications Version 1.2.5 of the ECommerce-WD plugin for Joomla! has multiple unauthenticated SQL injections available via the advanced search functionality. http://extensions.joomla.org/extension/ecommerce-wd The vulnerable parameters are searchcategoryi...