Read the docs

jDownloads

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

jDownloads records in CISA KEV

No jDownloads vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jdownloads 6 records LOW

Records

6 records

TI-2020-13614 CVE-2020-19451 · GHSA-7455-9qj9-w6rp

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via…

Priority LOW 35

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01052 Published 2020-09-25 No fix listed CWE-89
TI-2022-10784 CVE-2022-27909 · GHSA-93hf-mgcv-fqq8

Extension - Incorrect Access Control within jdownloads extension

Priority LOW 22

In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00877 Published 2022-05-06 No fix listed
Open these records in search →