High severity7.5NVD Advisory· Published Sep 25, 2020· Updated Jun 17, 2026

CVE-2020-19451

Description

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.

Affected products

Joomla/jdownloadsdescription
Joomla/jDownloadsllm-fuzzy
Range: =3.2.63

Patches

Vulnerability mechanics

References

www.cnvd.org.cn/flaw/show/CNVD-2019-09871nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000