CVE-2010-1494

CVE-2010-1494 describes a directory traversal / local file inclusion flaw in the Joomla! component AWDwall (com_awdwall) 1.5.4 . An unauthenticated attacker can read arbitrary files by supplying a trailing ‘..’ in the controller parameter to index.php, due to inadequate input validation. The vuln...

CVE-2010-1493

The CVE-2010-1493 issue affects Joomla! using the AWDwall component (com_awdwall) prior to version 1.5.5. The root cause is an SQL injection in the cbuser parameter of an awdwall action to index.php, enabling remote attackers to execute arbitrary SQL commands. The vulnerability impact includes po...