Lucene search

K
cve[email protected]CVE-2010-0759
HistoryFeb 27, 2010 - 12:30 a.m.

CVE-2010-0759

2010-02-2700:30:00
CWE-22
web.nvd.nist.gov
25
cve-2010-0759
directory traversal
core design scriptegrator
joomla
vulnerability
remote attack
arbitrary files

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.3%

Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files[] parameter, a different vector than CVE-2010-0760.

Affected configurations

NVD
Node
greatjoomlascriptegrator_pluginMatch1.4.1
AND
joomlajoomla\!

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.016 Low

EPSS

Percentile

87.3%

Related for CVE-2010-0759