EUVD-2010-1333

Malware in sbrugna...

CVE-2010-1304

Joomla! User Status (com_userstatus) component 1.21.16 contains a directory traversal (local file inclusion) in userstatus.php. An unauthenticated remote attacker can read arbitrary files by supplying a .. in the controller parameter to index.php. Impact is exposure of sensitive files; remediatio...