CVE-2011-4804 Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to in...
MediumCVSS 5.0
EPSS 21.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foobla com obsuggest | <= 1.6.4 | No fix listed |
| foobla com obsuggest | = 1.5.0.1 | No fix listed |
| foobla com obsuggest | = 1.5.1.1.20090922 | No fix listed |
| foobla com obsuggest | = 1.5.1.2 | No fix listed |
| foobla com obsuggest | = 1.5.1.4 | No fix listed |
| foobla com obsuggest | = 1.5.1.5 | No fix listed |
| foobla com obsuggest | = 1.5.1.6 | No fix listed |
| foobla com obsuggest | = 1.5.1.7 | No fix listed |
| foobla com obsuggest | = 1.6.1-b7 | No fix listed |
| foobla com obsuggest | = 1.6.1-b8 | No fix listed |
References
- foobla.com vendor-advisory
- 46844 third-party-advisory vendor-advisory
- 48944 exploit vdb-entry