Lucene search
HistoryApr 07, 2010 - 6:30 p.m.
CVE-2010-1302
cve
2010
1302
directory traversal
vulnerability
dwgraphs.php
decryptweb
dw graphs
joomla
remote attackers
arbitrary files
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.3%
Directory traversal vulnerability in dwgraphs.php in the DecryptWeb DW Graphs (com_dwgraphs) component 1.0 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.
Affected configurations
Node
decryptwebcom_dwgraphsMatch1.0
joomlajoomla\!
| CPE | Name | Operator | Version |
|---|---|---|---|
| decryptweb:com_dwgraphs | decryptweb com dwgraphs | eq | 1.0 |
Related
nuclei
nuclei
Joomla! Component DW Graph - Local File Inclusion
2021-09-27 11:02:48
nvd
nvd
CVE-2010-1302
2010-04-07 18:30:00
cvelist
cvelist
CVE-2010-1302
2010-04-07 18:00:00
prion
prion
Directory traversal
2010-04-07 18:30:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.9 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.3%
Related for CVE-2010-1302