CVE-2010-1340

CVE-2010-1340 affects the Joomla! component com_jresearch. A directory traversal in jresearch.php allows a remote attacker to read arbitrary local files by injecting “..” into the controller parameter of index.php, effectively a local file inclusion. The Nuclei template confirms the LFI vector an...

CVE-2010-1340: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in jresearch.php in the J!Research comjresearch component for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...