vendor:
Jtag Members Directory
by:
Ihsan Sencan
7.5
CVSS
HIGH
Arbitrary File Download
434
CWE
Product Name: Jtag Members Directory
Affected Version From: 5.3.7
Affected Version To: 5.3.7
Patch Exists: YES
Related CWE: CVE-2018-6008
CPE: a:joomlatag:jtag_members_directory:5.3.7
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: WiN7_x64/KaLiLinuX_x64
2018
Joomla! Component Jtag Members Directory 5.3.7 – Arbitrary File Download
The vulnerability allows an attacker download arbitrary file from the vulnerable Joomla! Component Jtag Members Directory 5.3.7. An attacker can send a specially crafted request to the vulnerable component in order to download arbitrary file.
Mitigation:
Update to the latest version of Joomla! Component Jtag Members Directory 5.3.7.
