CVE-2010-1304

Joomla! User Status (com_userstatus) component 1.21.16 contains a directory traversal (local file inclusion) in userstatus.php. An unauthenticated remote attacker can read arbitrary files by supplying a .. in the controller parameter to index.php. Impact is exposure of sensitive files; remediatio...

CVE-2010-1304: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in userstatus.php in the User Status comuserstatus component 1.21.16 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...