Lucene search
HistoryMay 19, 2010 - 12:07 p.m.
CVE-2010-1957
cve
2010
1957
directory traversal
love factory
joomla
vulnerability
remote attackers
arbitrary files
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.8%
Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a … (dot dot) in the controller parameter to index.php.
Affected configurations
Node
thefactorycom_lovefactoryMatch1.3.4
joomlajoomla\!
| CPE | Name | Operator | Version |
|---|---|---|---|
| thefactory:com_lovefactory | thefactory com lovefactory | eq | 1.3.4 |
Related
nuclei
nuclei
Joomla! Component Love Factory 1.3.4 - Local File Inclusion
2021-09-15 00:06:31
prion
prion
Directory traversal
2010-05-19 12:07:00
nvd
nvd
CVE-2010-1957
2010-05-19 12:07:52
cvelist
cvelist
CVE-2010-1957
2010-05-18 19:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.017 Low
EPSS
Percentile
87.8%
Related for CVE-2010-1957