CVE-2010-1305 Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to re...
MediumCVSS 5.0
EPSS 20.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomlamo com jinventory | = 1.23.02 | No fix listed |
References
- extensions.joomla.org patch
- packetstormsecurity.org exploit
- 39351 third-party-advisory vendor-advisory
- 12065 exploit
- 39203 exploit vdb-entry
- ADV-2010-0811 vdb-entry vendor-advisory
- jinventory-controller-file-include(57538) vdb-entry