CVE

Id
44306  
CVE No.
CVE-2010-1722  
Status
Candidate  
Description
Directory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.  
Phase
Assigned (20100504)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
483010 44306 CVE-2010-1722 MISC:http://packetstormsecurity.org/1004-exploits/joomlaonlinemarket-lfi.txt  View
483011 44306 CVE-2010-1722 EXPLOIT-DB:12177  View
483012 44306 CVE-2010-1722 URL:http://www.exploit-db.com/exploits/12177  View
483013 44306 CVE-2010-1722 OSVDB:63671  View
483014 44306 CVE-2010-1722 URL:http://www.osvdb.org/63671  View
483015 44306 CVE-2010-1722 SECUNIA:39409  View
483016 44306 CVE-2010-1722 URL:http://secunia.com/advisories/39409  View
483017 44306 CVE-2010-1722 XF:commarket-controller-file-include(57674)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38254 JVNDB-2010-004039 EC21 Clone の offers_buy.php における SQL インジェクションの脆弱性 EC21 Clone の offers_buy.php には、SQL インジェクションの脆弱性が存在します。 CVE-2010-1726 44306 7.5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004039.html  View