CVE

Id
47864  
CVE No.
CVE-2010-5280  
Status
Candidate  
Description
Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabname parameter in a userProfile action to index.php. NOTE: this can be leveraged to execute arbitrary code by using the file upload feature.  
Phase
Assigned (20121126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
520359 47864 CVE-2010-5280 BUGTRAQ:20101008 LFI / RCE vlunerability in Joomla Community Builder Enhenced (CBE) Component  View
520360 47864 CVE-2010-5280 URL:http://www.securityfocus.com/archive/1/archive/1/514183/100/0/threaded  View
520361 47864 CVE-2010-5280 EXPLOIT-DB:15222  View
520362 47864 CVE-2010-5280 URL:http://www.exploit-db.com/exploits/15222  View
520363 47864 CVE-2010-5280 MISC:http://packetstormsecurity.org/1010-exploits/joomlacbe-lfi.txt  View
520364 47864 CVE-2010-5280 BID:43873  View
520365 47864 CVE-2010-5280 URL:http://www.securityfocus.com/bid/43873  View
520366 47864 CVE-2010-5280 SECUNIA:41741  View
520367 47864 CVE-2010-5280 URL:http://secunia.com/advisories/41741  View
520368 47864 CVE-2010-5280 XF:joomla-cbe-file-upload(62376)  View
520369 47864 CVE-2010-5280 URL:http://xforce.iss.net/xforce/xfdb/62376  View
520370 47864 CVE-2010-5280 XF:joomla-cbe-index-file-include(62375)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
29852 JVNDB-2012-005559 Collabtive におけるクロスサイトスクリプティングの脆弱性 Collabtive には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-5284 47864 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005559.html  View