Joomla! Component AWDwall 1.5.4 - Local File Inclusion

A directory traversal vulnerability in the AWDwall comawdwall component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1494 info: name: Joomla! Component AWDwall 1.5.4 - Local File Inclusion author: daffain...

CVE-2010-1494

Directory traversal vulnerability in the AWDwall comawdwall component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1494

CVE-2010-1494 describes a directory traversal / local file inclusion flaw in the Joomla! component AWDwall (com_awdwall) 1.5.4 . An unauthenticated attacker can read arbitrary files by supplying a trailing ‘..’ in the controller parameter to index.php, due to inadequate input validation. The vuln...