Lucene search

K
cve[email protected]CVE-2010-2259
HistoryJun 09, 2010 - 8:30 p.m.

CVE-2010-2259

2010-06-0920:30:29
CWE-22
web.nvd.nist.gov
22
cve
2010
2259
directory traversal
vulnerability
bf survey
joomla

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.8%

Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the controller parameter to index.php.

Affected configurations

NVD
Node
tamlyncreativecom_bfsurvey_profreeMatch1.2.6
AND
joomlajoomla\!
Node
tamlyncreativecom_bfsurvey_proRange1.3.0
AND
joomlajoomla\!
Node
tamlyncreativecom_bfsurvey_basicRange1.1
AND
joomlajoomla\!

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.017 Low

EPSS

Percentile

87.8%