Directory traversal

2010-01-0622:00:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.234 Low

EPSS

Percentile

96.6%

JSON

Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the controller parameter in a studieslist action to index.php.

CPENameOperatorVersion
com_biblestudyeq6.1

CPE	Name	Operator	Version
	com_biblestudy	eq	6.1

References

packetstormsecurity.org/1001-exploits/joomlabiblestudy-lfi.txt

secunia.com/advisories/37896

www.securityfocus.com/bid/37583