Lucene search
HistoryApr 19, 2010 - 7:30 p.m.
CVE-2010-1476
cve
2010
1476
directory traversal
alphauserpoints
joomla
remote attack
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.035 Low
EPSS
Percentile
91.6%
Directory traversal vulnerability in the AlphaUserPoints (com_alphauserpoints) component 1.5.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a … (dot dot) in the view parameter to index.php.
Affected configurations
Node
alphaplugcom_alphauserpointsMatch1.5.5
joomlajoomla\!
| CPE | Name | Operator | Version |
|---|---|---|---|
| alphaplug:com_alphauserpoints | alphaplug com alphauserpoints | eq | 1.5.5 |
Related
cvelist
cvelist
CVE-2010-1476
2010-04-19 19:04:00
nuclei
nuclei
Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion
2021-09-04 03:35:49
prion
prion
Directory traversal
2010-04-19 19:30:00
nvd
nvd
CVE-2010-1476
2010-04-19 19:30:00
nessus
nessus
Joomla! / Mambo Component 'view' Parameter Local File Include
2010-04-12 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
High
0.035 Low
EPSS
Percentile
91.6%
Related for CVE-2010-1476