CVE-2010-2857

Joomla! Music Manager component vulnerable to Local File Inclusion via directory traversal. The flaw allows remote attackers to read arbitrary files by manipulating the cid parameter in album.html using .. (dot dot) in the request. This is described in the Nuclei template for CVE-2010-2857 (Jooml...