CVE-2010-4719

Joomla! component JRadio (com_jradio) contains a Local File Inclusion (LFI) in versions before 1.5.1. The vulnerability allows remote attackers to read arbitrary files via directory traversal sequences in the index.php controller parameter. The issue arises from a directory traversal flaw in the ...

CVE-2010-4702

CVE-2010-4702 describes a SQL injection vulnerability in the Joomla! JRadio (com_jradio) component prior to version 1.5.1 . The underlying issue allows a remote attacker to execute arbitrary SQL commands via unspecified vectors. The advisory notes impact as high (CVSS v2 base score 7.5) with pote...