Joomla Component com_joomlaupdater LFI

A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

CVE-2010-1307: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Magic Updater comjoomlaupdater component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...