CVE-2010-2680

2010-07-1213:27:27

CWE-22

mitre

web.nvd.nist.gov

cve-2010-2680

directory traversal

je section

property finder

joomla

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.008

Percentile

82.0%

JSON

Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php.

Affected configurations

Nvd

Node

harmistechnologycom_jesectionfinder

AND

joomlajoomla\!

VendorProductVersionCPE
harmistechnologycom_jesectionfinder*cpe:2.3:a:harmistechnology:com_jesectionfinder:*:*:*:*:*:*:*:*
joomlajoomla\!*cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
harmistechnology	com_jesectionfinder	*	cpe:2.3:a:harmistechnology:com_jesectionfinder::::::::
joomla	joomla\!	*	cpe:2.3:a:joomla:joomla\!::::::::