CVE-2010-0985

Joomla! component com_abbrev (Abbreviations Manager) 1.1 is affected by a directory traversal (LFI) in the controller parameter to index.php, enabling remote attackers to include and execute arbitrary local files by using .. in the request. Root cause: improper path handling in the component. Imp...