CVE-2010-1471

CVE-2010-1471 affects Joomla! component AddressBook (com_addressbook) 1.5.0. A directory traversal (Local File Inclusion) flaw allows an attacker to read arbitrary files by supplying .. in the controller parameter to index.php. The Nuclei template and related records corroborate this LFI, specify...

CVE-2010-4990

The CVE-2010-4990 entry concerns a SQL injection in the Joomla! Front-edit Address Book (com_addressbook) component. The vulnerability allows remote attackers to execute arbitrary SQL commands through the Itemid parameter in a contact action to index.php. This is documented across multiple source...