Skip to content

CVE-2010-3203 Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the dflink parameter in a prevsell dwnfre...

MediumCVSS 5.0 EPSS 8.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Directory traversal vulnerability in the PicSell (com_picsell) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the dflink parameter in a prevsell dwnfree action to index.php.

Affected products

ProductAffected versionsFixed in
xmlswf com picsell = 1.0 No fix listed

References

  • 41187 third-party-advisory vendor-advisory
  • 14845 exploit