CVE-2010-0696 Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../......
MediumCVSS 5.0
EPSS 28.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ (modified dot dot) in the file parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomlaworks jw allvideos | = 3.0 | No fix listed |
| joomlaworks jw allvideos | = 3.1 | No fix listed |
| joomlaworks jw allvideos | = 3.2 | No fix listed |
References
- 62331 vdb-entry
- 38587 third-party-advisory vendor-advisory
- 11447 exploit
- www.joomlaworks.gr patch vendor-advisory
- 38238 exploit vdb-entry