CVE-2010-1354

Joomla! component com_vjdeo (VJDEO) 1.0 and 1.0.1 is affected by CVE-2010-1354: a Local File Inclusion via directory traversal (".." in the controller parameter to index.php) allows reading arbitrary files. The Nuclei template confirms this LFI vector and the affected component/version. Impact is...