Directory traversal

2010-07-2502:04:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.2%

JSON

Directory traversal vulnerability in assets/captcha/includes/alikon/playcode.php in the InterJoomla ArtForms (com_artforms) component 2.1b7.2 RC2 for Joomla! allows remote attackers to read arbitrary files via a … (dot dot) in the l parameter.

CPENameOperatorVersion
com_artformseq2.1b7.2 rc2

CPE	Name	Operator	Version
	com_artforms	eq	2.1b7.2 rc2

References

packetstormsecurity.org/1007-exploits/joomlaartforms-sqltraversalxss.txt

www.securityfocus.com/archive/1/512215/100/0/threaded

www.securityfocus.com/bid/41457

exchange.xforce.ibmcloud.com/vulnerabilities/60161

www.exploit-db.com/exploits/14263