CVE-2010-1531

Directory traversal vulnerability in the redSHOP (com_redshop) component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:redcomponent:com_redshop:1.0:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.8:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.9:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.10:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.11:*:*:*:*:*:*:*
cpe:2.3:a:redcomponent:com_redshop:1.0.12:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2010-04-26 18:30

Updated : 2024-02-28 11:41


NVD link : CVE-2010-1531

Mitre link : CVE-2010-1531

CVE.ORG link : CVE-2010-1531


JSON object : View

Products Affected

redcomponent

  • com_redshop

joomla

  • joomla\!
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')