CVE-2010-1476

The Nuclei template confirms a Local File Inclusion vulnerability in Joomla! component AlphaUserPoints (com_alphauserpoints) version 1.5.5, exploitable via a directory traversal in the view parameter to index.php. This allows remote attackers to read arbitrary files and may have other impacts. Af...

CVE-2009-3342

CVE-2009-3342 affects the Joomla! AlphaUserPoints component (com_alphauserpoints) version 1.5.2. The vulnerability is a SQL injection in frontend/assets/ajax/checkusername.php, exploitable via the username2points parameter. This allows remote attackers to execute arbitrary SQL commands. The NVD e...