CVE-2010-4719

Опубликовано: 01 фев. 2011

Источник: nvd

CVSS2: 7.5

EPSS Средний

Описание

Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.

Ссылки

http://packetstormsecurity.org/files/view/96751/joomlajradio-lfi.txt
Exploit
http://secunia.com/advisories/42600
Vendor Advisory
http://www.exploit-db.com/exploits/15749
Exploit
http://www.fxwebdesign.nl/index.php?option=com_content&view=article&id=20&Itemid=56
Vendor Advisory
http://www.securityfocus.com/bid/45440
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/64143
http://packetstormsecurity.org/files/view/96751/joomlajradio-lfi.txt
Exploit
http://secunia.com/advisories/42600
Vendor Advisory
http://www.exploit-db.com/exploits/15749
Exploit
http://www.fxwebdesign.nl/index.php?option=com_content&view=article&id=20&Itemid=56
Vendor Advisory
http://www.securityfocus.com/bid/45440
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/64143

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:fxwebdesign:com_jradio:*:*:*:*:*:*:*:*

Версия до 1.5.0 (включая)

cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.15786

Средний

7.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-75m8-pqjg-gwwv

github

больше 4 лет назад