CVE-2018-10068

概要

参考情報

• jdownloads.com/index.php/news/264-jdownloads-3-2-59-published.html · Patch
• vel.joomla.org/resolved/2150-jdownloads-3-2-58-xss-cross-site-scripting · Third Party Advisory
• exploit-db.com/exploits/44471 · Third Party Advisory

jdownloads のその他の脆弱性

• CVE-2022-27909中 4.3In Joomla component 'jDownloads 3.9.8.2 Stable' the remote user can change some parameters in the address bar and see the names of other use…
• CVE-2020-19455高 7.5SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via…
• CVE-2020-19451高 7.5SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via …
• CVE-2020-19450高 7.5SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function …
• CVE-2020-19447高 7.5SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.