https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 14:50:59 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-117542 <p>Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads &lt; 4.1.8 - A manipulated `update_file` form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations.</p> <p>Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads &lt; 4.1.8 - A manipulated `update_file` form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations.</p> https://db.gcve.eu/vuln/fkie_cve-2026-117542 https://db.gcve.eu/vuln/ghsa-vrwx-f3jm-xp57 <p>Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads &lt; 4.1.8 - A manipulated `update_file` form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations.</p> <p>Joomla Extension - jdownloads.com - Authenticated path traversal in jDownloads &lt; 4.1.8 - A manipulated `update_file` form parameter could bypass the intended server-file selection restrictions and move files from outside the permitted selection directory or assign them to a download. This could expose file contents and remove source files from their original locations.</p> https://db.gcve.eu/vuln/ghsa-vrwx-f3jm-xp57