Lucene search
HistoryMay 19, 2010 - 12:07 p.m.
CVE-2010-1955
cve
2010
1955
directory traversal
deluxe blog factory
com_blogfactory
joomla
vulnerability
security
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.8%
Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a … (dot dot) in the controller parameter to index.php.
Affected configurations
Node
thefactorycom_blogfactoryMatch1.1.2
joomlajoomla\!
| CPE | Name | Operator | Version |
|---|---|---|---|
| thefactory:com_blogfactory | thefactory com blogfactory | eq | 1.1.2 |
Related
prion
prion
Directory traversal
2010-05-19 12:07:00
nvd
nvd
CVE-2010-1955
2010-05-19 12:07:52
nuclei
nuclei
Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusion
2021-08-12 23:23:04
cvelist
cvelist
CVE-2010-1955
2010-05-18 19:00:00
dsquare
dsquare
Joomla Component com_blogfactory 1.1.2 LFI
2012-02-01 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.8%
Related for CVE-2010-1955