Vulners
Lucene search
Joomla webERPcustomer Component "controller" Local File Inclusion Vulnerability
Description
A vulnerability has been reported in the webERPcustomer component for Joomla!, which can be exploited by malicious people to disclose sensitive information.
Input passed via the "controller" parameter to index.php (when "option" is set to "com_weberpcustomer") is not properly verified before being used to include files. This can be exploited to include arbitrary files from local resources via directory traversal sequences and URL-encoded NULL bytes.
The vulnerability is reported in versions prior to 1.06.02.
Solution
Update to version 1.06.02.
Provided and/or discovered by
Chip D3 Bi0s
Original Advisory
http://extensions.joomla.org/extensions/bridges/crm-bridges/8754
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
09 Apr 2010 00:00Current
7.1High risk
Vulners AI Score7.1