CVE

Id
44298  
CVE No.
CVE-2010-1714  
Status
Candidate  
Description
Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.  
Phase
Assigned (20100504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
482942 44298 CVE-2010-1714 MISC:http://packetstormsecurity.org/1004-exploits/joomlaarcadegames-lfi.txt  View
482943 44298 CVE-2010-1714 EXPLOIT-DB:12168  View
482944 44298 CVE-2010-1714 URL:http://www.exploit-db.com/exploits/12168  View
482945 44298 CVE-2010-1714 OSVDB:63660  View
482946 44298 CVE-2010-1714 URL:http://www.osvdb.org/63660  View
482947 44298 CVE-2010-1714 SECUNIA:39413  View
482948 44298 CVE-2010-1714 URL:http://secunia.com/advisories/39413  View
482949 44298 CVE-2010-1714 VUPEN:ADV-2010-0860  View
482950 44298 CVE-2010-1714 URL:http://www.vupen.com/english/advisories/2010/0860  View
482951 44298 CVE-2010-1714 XF:comarcadegames-controller-file-include(57683)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38970 JVNDB-2010-004755 Joomla! 用の archeryscores コンポーネントにおけるディレクトリトラバーサルの脆弱性 Joomla! 用の Archery Scores (com_archeryscores) コンポーネントの archeryscores.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-1718 44298 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004755.html  View