filedownload

filedownload has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2017; all 3 are fixed as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2015 was the busiest year with 2 disclosures.

The most common weakness is Confused Deputy, behind 1 of the records (33%). Other recurring categories include Cross-Site Scripting, SQL Injection.

Every one of the 3 issues recorded for filedownload has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Larry W. Cashdollar.

Strategic Overview

Avg CVSSHigh

8.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all filedownload vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2015-1000003

filedownload < 1.4 - Blind SQL Injection

Read the full analysis

Vulnerability Records

3 records


2017-03-27 00:00	File Download <= 1.4 - Open Proxy filedownload <= 1.4	`CVE-2015-1000002`	8.2 High	Larry W. Cashdollar	Yes
2015-07-11 00:00	filedownload < 1.4 - Blind SQL Injection filedownload < 1.4	`CVE-2015-1000003`	9.8 Critical	Larry W. Cashdollar	Yes
2015-07-11 00:00	filedownload plugin <= 1.4 - Cross-Site Scripting filedownload <= 1.4	`CVE-2015-1000004`	6.1 Medium	Larry W. Cashdollar	Yes

Showing 1–3 of 3 reports