Joomla! Component com_jresearch - 'Controller' Local File Inclusion

A directory traversal vulnerability in jresearch.php in the J!Research comjresearch component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1340 info: name: Joomla! Component comjresearch - 'Controller' Local Fi...

CVE-2010-1340

CVE-2010-1340 affects the Joomla! component com_jresearch. A directory traversal in jresearch.php allows a remote attacker to read arbitrary local files by injecting “..” into the controller parameter of index.php, effectively a local file inclusion. The Nuclei template confirms the LFI vector an...

CVE-2010-1340

Directory traversal vulnerability in jresearch.php in the J!Research comjresearch component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...