CVE-2010-1601

CVE-2010-1601 refers to a directory traversal (local file inclusion) in the Joomla! JA Comment (com_jacomment) component. The vulnerability exists when an attacker supplies a …/ (dot dot) sequence in the view parameter to index.php, enabling reading of arbitrary files on the affected server. The ...