CVE-2010-3426

CVE-2010-3426 affects Joomla! JPhone component (com_jphone) 1.0 Alpha 3. A local file inclusion flaw in jphone.php allows an unauthenticated attacker to craft a controller parameter to index.php, causing require_once(JPATH_COMPONENT/…/controllers/{$controller}.php) with an unsanitized $controller...

CVE-2010-3426

creationtimestamp| type| source ---|---|--- 2010-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14964...