CVE-2010-1494

CVE-2010-1494 describes a directory traversal / local file inclusion flaw in the Joomla! component AWDwall (com_awdwall) 1.5.4 . An unauthenticated attacker can read arbitrary files by supplying a trailing ‘..’ in the controller parameter to index.php, due to inadequate input validation. The vuln...