Directory traversal

2010-03-2319:30:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.378 Low

EPSS

Percentile

97.2%

JSON

Directory traversal vulnerability in the Community Polls (com_communitypolls) component 1.5.2, and possibly earlier, for Core Joomla! allows remote attackers to read arbitrary files via a … (dot dot) in the controller parameter to index.php.

CPENameOperatorVersion
com_communitypollsle1.5.2
com_communitypollseq1.0.1
com_communitypollseq1.0.2
com_communitypollseq1.0.3
com_communitypollseq1.0.4
com_communitypollseq1.0.5
com_communitypollseq1.0.6
com_communitypollseq1.0.7
com_communitypollseq1.0.8
com_communitypollseq1.0.9

Name	Operator	Version
com_communitypolls	le	1.5.2
com_communitypolls	eq	1.0.1
com_communitypolls	eq	1.0.2
com_communitypolls	eq	1.0.3
com_communitypolls	eq	1.0.4
com_communitypolls	eq	1.0.5
com_communitypolls	eq	1.0.6
com_communitypolls	eq	1.0.7
com_communitypolls	eq	1.0.8
com_communitypolls	eq	1.0.9