88 matches found
CVE-2026-117551
Joomla Extension - jdownloads.com - RCE through file upload in jDownloads 4.1.8 - Insufficient validation of frontend thumbnail uploads allowed users with upload permission to place executable files on the server. This results in PHP code execution...
CVE-2026-117550
Joomla Extension - jdownloads.com - Publishing of files without approval in jDownloads 4.1.8 - Manipulated frontend submission parameters could bypass the intended publication and ownership rules. In particular, submissions could be published despite automatic publication being disabled, and...
CVE-2026-61900
Joomla Extension - jdownloads.com - Unauthenticated arbitrary file upload in jDownloads 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE...
CVE-2026-61900 Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6
The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE...
CVE-2026-61900 Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6
Joomla Extension - jdownloads.com - Unauthenticated arbitrary file upload in jDownloads 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE...
CVE-2026-61900
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE...
CVE-2026-61900: Unrestricted Upload of File with Dangerous Type
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads 4.1.6 - The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE...
PT-2026-61684
The Joomla extension JDownloads is vulnerable to an unauthenticated file upload, leading to full RCE...
CVE-2025-55758
Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered...
EUVD-2025-36444
Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered...
CVE-2025-55758
Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered...
CVE-2025-55758
The JDownloads component for Joomla (versions 1.0.0 through 4.0.47 ) is vulnerable to multiple Cross-Site Request Forgery (CSRF) attack vectors. These vulnerabilities allow an attacker to perform actions on behalf of an authenticated user without their knowledge or consent. To mitigate this risk,...
CVE-2025-55758 Extension - jdownloads.com - CSRF vectors in jDownloads component 1.0.0 - 4.0.47 for Joomla
Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered...
CVE-2025-55758 Extension - jdownloads.com - CSRF vectors in jDownloads component 1.0.0 - 4.0.47 for Joomla
Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered...
PT-2025-44096
Name of the Vulnerable Software and Affected Versions JDownloads versions 1.0.0 through 4.0.47 Description The JDownloads component for Joomla is susceptible to multiple Cross-Site Request Forgery CSRF attacks. These attacks could allow an attacker to perform actions on behalf of an authenticated...
jDownloads security vulnerabilities
jDownloads is a Joomla! extension to jDownloads for managing downloads. A security vulnerability exists in jDownloads versions 1.0.0 through 4.0.47, which stems from the presence of multiple cross-site request forgery attack vectors...
CVE-2025-55758: Cross-Site Request Forgery (CSRF)
Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered...
EUVD-2020-11354
Malware in sbrugna...