Lucene search

K
cve[email protected]CVE-2010-1718
HistoryMay 04, 2010 - 4:00 p.m.

CVE-2010-1718

2010-05-0416:00:36
CWE-22
web.nvd.nist.gov
30
cve
directory traversal
vulnerability
archery scores
joomla
remote attack
arbitrary local files

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.1%

Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the controller parameter to index.php.

Affected configurations

NVD
Node
lispeltuutcom_archeryscoresMatch1.0.6
AND
joomlajoomla\!

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

82.1%

Related for CVE-2010-1718