Skip to content

Product

hdwplayer com_hdwplayer vulnerabilities

1 published CVE affecting hdwplayer com_hdwplayer, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest hdwplayer com_hdwplayer CVEs

Newest publication first

  1. CVE-2020-37218 Joomla com_hdwplayer 4.2 SQL Injection via search.php

    Published
    HighCVSS 8.8 EPSS 0.27%

    Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hdwplayersearch parameter. Attackers can submit POST requests with crafted SQL pa...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.