cbcvebase.

Hdwplayer Hdw-Player-Video-Player-Video-Gallery vulnerabilities

1 known vulnerability affecting hdwplayer/hdw-player-video-player-video-gallery.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2014-5180P3MEDIUMCVSS 6.5PoCv2.4.22014-08-06
CVE-2014-5180 [MEDIUM] CWE-89 CVE-2014-5180: SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-vid SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php.
nvd
Hdwplayer Hdw-Player-Video-Player-Video-Gallery vulnerabilities | cvebase