CVE-2010-1955

Affected software: Joomla! Deluxe Blog Factory component (com_blogfactory) version 1.1.2. Vulnerability: Local File Inclusion via a directory traversal (.. in the controller parameter to index.php), enabling reading arbitrary files. Root cause: improper handling of the controller parameter leadin...