CVE-2010-0759 Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and p...
HighCVSS 7.5
EPSS 15.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files[] parameter, a different vector than CVE-2010-0760.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| greatjoomla scriptegrator plugin | = 1.4.1 | No fix listed |
References
- packetstormsecurity.org exploit
- 38637 third-party-advisory vendor-advisory
- 11498 exploit
- 62486 vdb-entry
- 38296 exploit vdb-entry
- scriptegrator-jsloader-file-include(56380) vdb-entry