Directory traversal

2011-12-1400:55:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.449 Medium

EPSS

Percentile

97.4%

JSON

Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a … (dot dot) in the controller parameter to index.php.

CPENameOperatorVersion
com_obsuggestle1.6.4
com_obsuggesteq1.5.0.1
com_obsuggesteq1.5.1.1.20090922
com_obsuggesteq1.5.1.2
com_obsuggesteq1.5.1.4
com_obsuggesteq1.5.1.5
com_obsuggesteq1.5.1.6
com_obsuggesteq1.5.1.7
com_obsuggesteq1.6.1 b8
com_obsuggesteq1.6.1 b7

Name	Operator	Version
com_obsuggest	le	1.6.4
com_obsuggest	eq	1.5.0.1
com_obsuggest	eq	1.5.1.1.20090922
com_obsuggest	eq	1.5.1.2
com_obsuggest	eq	1.5.1.4
com_obsuggest	eq	1.5.1.5
com_obsuggest	eq	1.5.1.6
com_obsuggest	eq	1.5.1.7
com_obsuggest	eq	1.6.1 b8
com_obsuggest	eq	1.6.1 b7