| Package | Affected versions | Patched versions |
|---|---|---|
| jw allvideos | = 3.0= 3.1= 3.2 |
Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ (modified dot dot) in the file parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free