CVE-2010-0467

Опубликовано: 02 фев. 2010

Источник: nvd

CVSS3: 5.8

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.

Ссылки

http://secunia.com/advisories/38378
Broken Link
Third Party Advisory
http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.html
Broken Link
Vendor Advisory
http://www.exploit-db.com/exploits/11277
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/11282
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/37987
Broken Link
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/55953
Third Party Advisory
VDB Entry
http://secunia.com/advisories/38378
Broken Link
Third Party Advisory
http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.html
Broken Link
Vendor Advisory
http://www.exploit-db.com/exploits/11277
Third Party Advisory
VDB Entry
http://www.exploit-db.com/exploits/11282
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/37987
Broken Link
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/55953
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:chillcreations:com_ccnewsletter:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02939

Низкий

5.8 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-c2pp-46rf-cqg2