Joomla Component Jw_allVideos Remote File Download (CVE-2010-0696)

A directory traversal vulnerability has been reported in Joomlaworks Jw Allvideos. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

CVE-2010-0696

Directory traversal vulnerability in includes/download.php in the JoomlaWorks AllVideos JwallVideos plugin 3.0 through 3.2 for Joomla! allows remote attackers to read arbitrary files via a ./../.../ modified dot dot in the file parameter...

CVE-2010-0696

Summary: CVE-2010-0696 affects the JoomlaWorks AllVideos (Jw_allVideos) plugin for Joomla! (versions 3.0–3.2). The vulnerability is a directory traversal in includes/download.php that allows remote attackers to read arbitrary files via a ../.. path in the file parameter, potentially exposing sens...