11 matches found
EUVD-2025-36444
Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered...
CVE-2025-55758
The JDownloads component for Joomla (versions 1.0.0 through 4.0.47 ) is vulnerable to multiple Cross-Site Request Forgery (CSRF) attack vectors. These vulnerabilities allow an attacker to perform actions on behalf of an authenticated user without their knowledge or consent. To mitigate this risk,...
CVE-2025-55758 Extension - jdownloads.com - CSRF vectors in jDownloads component 1.0.0 - 4.0.47 for Joomla
Multiple CSRF attack vectors in JDownloads component 1.0.0-4.0.47 for Joomla were discovered...
PT-2025-44096
Name of the Vulnerable Software and Affected Versions JDownloads versions 1.0.0 through 4.0.47 Description The JDownloads component for Joomla is susceptible to multiple Cross-Site Request Forgery CSRF attacks. These attacks could allow an attacker to perform actions on behalf of an authenticated...
EUVD-2020-11355
Malware in sbrugna...
CVE-2020-19450
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter...
CVE-2020-19447
SQL injection exists in the jdownloads 3.2.63 component for Joomla! comjdownloads/models/send.php via the fmarkedfilesid parameter...
CVE-2020-19451
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter...
CVE-2020-19451
SQL injection exists in the jdownloads 3.2.63 component for Joomla! via comjdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter...
