Published: 29/01/2018 Updated: 15/02/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Arbitrary File Download exists in the Jtag Members Directory 5.3.7 component for Joomla! via the download_file parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
joomlatag jtag members directory 5.3.7

Joomla! Jtag Members Directory component version 537 suffers from an arbitrary file download vulnerability ...

# # # # # # Exploit Title: Joomla! Component Jtag Members Directory 537 - Arbitrary File Download # Dork: N/A # Date: 27012018 # Vendor Homepage: joomlatagcom/ # Software Link: extensionsjoomlaorg/extensions/extension/clients-a-communities/members-lists/jtag-members-directory/ # Version: 537 # Category: Webapps # Tested on: ...

CWE-200 https://packetstormsecurity.com/files/146137/Joomla-Jtag-Members-Directory-5.3.7-Arbitrary-File-Download.html https://www.exploit-db.com/exploits/43913/https://nvd.nist.gov https://packetstormsecurity.com/files/146137/Joomla-Jtag-Members-Directory-5.3.7-Arbitrary-File-Download.html https://www.exploit-db.com/exploits/43913/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-6008

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect