Joomlaworks allvideos

Joomlaworks allvideos plugin version 4.5.0 and previous XSS cross-site scripting Extension Update Details The new 4.6.0 version released replaces the XSS affected JW Player v5 with the newest v6. UpdateNoticeURL http://www.joomlaworks.net/forum/extension-updates/14896-june-3rd,-2014-allvideos-v4-...

Directory traversal

Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos JwallVideos plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ modified dot dot in the file parameter...

CVE-2010-0696

Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos JwallVideos plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ modified dot dot in the file parameter...

CVE-2010-0696

Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos JwallVideos plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ modified dot dot in the file parameter...

CVE-2010-0696

Summary: CVE-2010-0696 affects the JoomlaWorks AllVideos (Jw_allVideos) plugin for Joomla! (versions 3.0–3.2). The vulnerability is a directory traversal in includes/download.php that allows remote attackers to read arbitrary files via a ../.. path in the file parameter, potentially exposing sens...

Joomla! JoomlaWorks AllVideos Plugin 'file' Parameter Directory Traversal

The version of the JoomlaWorks AllVideos plugin for Joomla! running on the remote host is affected by an information disclosure vulnerability due to improper sanitization of user-supplied input to the 'file' parameter before using it in the /plugins/content/jwallvideos/includes/download.php scrip...