CVE
- Id
- 43280
- CVE No.
- CVE-2010-0696
- Status
- Candidate
- Description
- Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos (Jw_allVideos) plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ (modified dot dot) in the file parameter.
- Phase
- Assigned (20100223)
- Votes
- None (candidate not yet proposed)
- Comments