CVE-2010-1352

Joomla! component JOOFORGE Jutebox (com_jukebox) versions 1.0 and 1.7 are affected by a Local File Inclusion via directory traversal, allowing remote attackers to read arbitrary files by submitting a .. in the controller parameter to index.php. The issue is documented as CVE-2010-1352. Practical ...