Approved changes feed: RSS · Atom

cpe:2.3:a:joomlashack:osdownloads:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJoomlashack (1cdb9cbe-e988-5a61-bd95-190680b4c8c5)
ProductOsdownloads (e7c2e438-5d1c-5db7-adb6-4814c1cc9d48)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
pkg:github/joomlashack/osdownloads purl2cpe 2026-09-09 08:33:47.941847

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-20259 vulnerable 2026-07-28 18:56:21.341711 Joomla OSDownloads 1.7.4 SQL Injection via item view
HIGH (8.2)
Joomla OSDownloads 1.7.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_osdownloads&view=item&id=[SQL] to extract sensitive database information including credentials and configuration data.
Published: 2026-06-19T15:40:54.844Z
Updated: 2026-10-01T15:19:04.631Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.