CVE-2010-1307

Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:software.realtyna:com_joomlaupdater:1.0:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:1.1:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:1.2:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:1.2.1:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:1.2.2:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:1.3.0:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:1.3.2:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:1.4:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:2.0.0:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:2.0.2:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:2.0.3:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:2.0.4:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:2.0.5:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:2.0.6:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:2.0.7:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:2.0.8:*:*:*:*:*:*:*
cpe:2.3:a:software.realtyna:com_joomlaupdater:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-04-08 16:30

Updated : 2024-02-28 11:41


NVD link : CVE-2010-1307

Mitre link : CVE-2010-1307

CVE.ORG link : CVE-2010-1307


JSON object : View

Products Affected

software.realtyna

  • com_joomlaupdater

joomla

  • joomla\!
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')