CVE-2010-0942

Joomla! component com_jvideodirect (controller parameter in index.php) is affected by a directory traversal vulnerability. An attacker can use ".." to read arbitrary server files via the Joomla! jVideoDirect module. Root cause: improper validation of the controller parameter allows traversal to s...

CVE-2010-0803

The CVE-2010-0803 entry concerns an SQL injection in the Joomla! extension jVideoDirect (com_jvideodirect), version 1.1 RC3b. The vulnerability allows remote attackers to execute arbitrary SQL commands through the v parameter to index.php. Connected sources confirm the affected package and vulner...