Jdownloads: Security Vulnerabilities
In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files
CVSS Score
4.3
EPSS Score
0.002
Published
2022-05-06
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter.
CVSS Score
7.5
EPSS Score
0.003
Published
2020-09-25
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.
CVSS Score
7.5
EPSS Score
0.003
Published
2020-09-25
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter.
CVSS Score
7.5
EPSS Score
0.003
Published
2020-09-25
SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.
CVSS Score
7.5
EPSS Score
0.003
Published
2020-09-24
The jDownloads extension before 3.2.59 for Joomla! has XSS.
CVSS Score
6.1
EPSS Score
0.04
Published
2018-04-12