Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: jDownloads Component: Jdownloads Clear all filters
TI-2022-10784 CVE-2022-27909 · GHSA-93hf-mgcv-fqq8

Extension - Incorrect Access Control within jdownloads extension

Priority LOW 22

In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00877 Published 2022-05-06 No fix listed
TI-2020-13614 CVE-2020-19451 · GHSA-7455-9qj9-w6rp

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via…

Priority LOW 35

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01052 Published 2020-09-25 No fix listed CWE-89