Jdownloads

jdownloads

6 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (6)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-27909 1Jdownloads 1Jdownloads Jun 17, 2026 May 6, 2022 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other users' files
CVE-2020-19455 1Jdownloads 1Jdownloads Jun 17, 2026 Sep 25, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter.
CVE-2020-19451 1Jdownloads 1Jdownloads Jun 17, 2026 Sep 25, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.
CVE-2020-19450 1Jdownloads 1Jdownloads Jun 17, 2026 Sep 25, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter.
CVE-2020-19447 1Jdownloads 1Jdownloads Jun 17, 2026 Sep 24, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.
CVE-2018-10068 1Jdownloads 1Jdownloads Nov 21, 2024 Apr 12, 2018 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The jDownloads extension before 3.2.59 for Joomla! has XSS.