AI Score
Confidence
Low
EPSS
Percentile
97.4%
Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./…/…/ (modified dot dot) in the file parameter.
osvdb.org/62331
secunia.com/advisories/38587
www.exploit-db.com/exploits/11447
www.joomlaworks.gr/content/view/77/34/
www.securityfocus.com/bid/38238