CVE

Id
43280  
CVE No.
CVE-2010-0696  
Status
Candidate  
Description
Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ (modified dot dot) in the file parameter.  
Phase
Assigned (20100223)  
Votes
None (candidate not yet proposed)  
Comments