Lucene search

K
cve[email protected]CVE-2010-1653
HistoryMay 03, 2010 - 1:51 p.m.

CVE-2010-1653

2010-05-0313:51:53
CWE-22
web.nvd.nist.gov
32
cve
2010
1653
directory traversal
graphics
joomla
remote attack
local files
execution

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

High

0.035 Low

EPSS

Percentile

91.6%

Directory traversal vulnerability in graphics.php in the Graphics (com_graphics) component 1.0.6 and 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
htmlcoderhelpercom_graphicsMatch1.0.6
OR
htmlcoderhelpercom_graphicsMatch1.5.0
AND
joomlajoomla\!

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

High

0.035 Low

EPSS

Percentile

91.6%

Related for CVE-2010-1653