>> ARCHIVE: 2017-12

Joomla! JEXTN Question and Answer component version 3.1.0 suffers from a remote SQL injection vulnerability.

Joomla! JEXTN Video Gallery component version 3.0.5 suffers from a remote SQL injection vulnerability.

Readymade Video Sharing Script version 3.2 suffers from a html injection vulnerability.

Paid To Read Script version 2.0.5 suffers from a remote SQL injection vulnerability.

Piwigo version 2.9.1 suffers from a remote SQL injection vulnerability.

Movie Guide version 2.0 suffers from a remote SQL injection vulnerability.

FS Lynda Clone version 1.0 suffers from a remote SQL injection vulnerability.

Bus Booking Script version 1.0 suffers from a remote SQL injection vulnerability.

This Metasploit module exploits a file upload vulnerability found in Western Digital’s MyCloud NAS web administration HTTP service. The /web/jquery/uploader/multi_uploadify.php PHP script provides multipart upload functionality that is accessible without…