Lucene search

[email protected]CVE-2010-1983

HistoryMay 19, 2010 - 8:00 p.m.

CVE-2010-1983

2010-05-1920:00:00

CWE-22

[email protected]

web.nvd.nist.gov

security

vulnerability

directory traversal

redtwitter

joomla

remote attackers

arbitrary files

cve-2010-1983

7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.0%

JSON

Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows remote attackers to read arbitrary files via a … (dot dot) in the view parameter to index.php. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
redcomponent:com_redtwitterredcomponent com redtwittereq1.0b8
redcomponent:com_redtwitterredcomponent com redtwittereq1.0b9
redcomponent:com_redtwitterredcomponent com redtwittereq1.0b9.1
redcomponent:com_redtwitterredcomponent com redtwittereq1.0b10
redcomponent:com_redtwitterredcomponent com redtwittereq1.0b11
redcomponent:com_redtwitterredcomponent com redtwittereq1.0b94.2

CPE	Name	Operator	Version
redcomponent:com_redtwitter	redcomponent com redtwitter	eq	1.0b8
redcomponent:com_redtwitter	redcomponent com redtwitter	eq	1.0b9
redcomponent:com_redtwitter	redcomponent com redtwitter	eq	1.0b9.1
redcomponent:com_redtwitter	redcomponent com redtwitter	eq	1.0b10
redcomponent:com_redtwitter	redcomponent com redtwitter	eq	1.0b11
redcomponent:com_redtwitter	redcomponent com redtwitter	eq	1.0b94.2

References

evilc0de.blogspot.com/2010/04/joomla-component-redtwitter-lfi-vuln.html

osvdb.org/63533

packetstormsecurity.org/1004-exploits/joomlaredtwitter-lfi.txt

secunia.com/advisories/39342

www.exploit-db.com/exploits/12055

www.securityfocus.com/bid/39211

exchange.xforce.ibmcloud.com/vulnerabilities/57511

7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.0%

JSON

Related for CVE-2010-1983

prion1 nuclei1 nessus1