PT-2026-40619 · Hdwplayer · Com Hdwplayer

Qw3Rtyty · Publicado 2026-05-13 · Atualizado 2026-05-13 · CVE-2020-37218

Mitre

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Joomla com hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hdwplayersearch parameter. Attackers can submit POST requests with crafted SQL payloads in the hdwplayersearch parameter to extract sensitive database information from the hdwplayer videos table.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2020-37218

Produtos afetados

Com Hdwplayer

Referências · 5

• 🔥 https://exploit-db.com/exploits/48242 · Exploit
• https://hdwplayer.com · Nota
• https://hdwplayer.com/download · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2020-37218 · Nota de Segurança
• https://vulncheck.com/advisories/joomla-com-hdwplayer-sql-injection-via-search-php · Nota