Lucene search
HistoryApr 19, 2010 - 7:30 p.m.
CVE-2010-1472
cve
2010
1472
directory traversal
daily horoscope
joomla
remote attack
arbitrary files
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
5.6 Medium
AI Score
Confidence
High
0.057 Low
EPSS
Percentile
93.4%
Directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a … (dot dot) in the controller parameter to index.php.
Affected configurations
Node
kazulahcom_horoscopeMatch1.5.0
joomlajoomla\!
| CPE | Name | Operator | Version |
|---|---|---|---|
| kazulah:com_horoscope | kazulah com horoscope | eq | 1.5.0 |
Related
nuclei
nuclei
Joomla! Component Horoscope 1.5.0 - Local File Inclusion
2021-09-06 00:00:44
cvelist
cvelist
CVE-2010-1472
2010-04-19 19:04:00
prion
prion
Directory traversal
2010-04-19 19:30:00
dsquare
dsquare
Joomla Component com_horoscope LFI
2012-02-06 00:00:00
nvd
nvd
CVE-2010-1472
2010-04-19 19:30:00
nessus
nessus
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
5.6 Medium
AI Score
Confidence
High
0.057 Low
EPSS
Percentile
93.4%
Related for CVE-2010-1472