exploitDog

CVE-2010-1717

Опубликовано: 04 мая 2010

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

Ссылки

http://secunia.com/advisories/39526
Vendor Advisory
http://www.exploit-db.com/exploits/12291
Exploit
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2010/0924
Vendor Advisory
http://secunia.com/advisories/39526
Vendor Advisory
http://www.exploit-db.com/exploits/12291
Exploit
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2010/0924
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:if_surfalert_project:if_surfalert:1.2:*:*:*:*:joomla\!:*:*

EPSS

Процентиль: 89%

0.04997

Низкий

7.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-mwvx-758m-vmgx

github

больше 3 лет назад

Directory traversal vulnerability in the iF surfALERT (com_if_surfalert) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

EPSS

Процентиль: 89%

0.04997

Низкий

7.5 High

CVSS2

Дефекты

CWE-22