CVE-2010-0942

Joomla! component com_jvideodirect (controller parameter in index.php) is affected by a directory traversal vulnerability. An attacker can use ".." to read arbitrary server files via the Joomla! jVideoDirect module. Root cause: improper validation of the controller parameter allows traversal to s...