Lucene search

K
cve[email protected]CVE-2010-0985
HistoryMar 16, 2010 - 7:30 p.m.

CVE-2010-0985

2010-03-1619:30:00
CWE-22
web.nvd.nist.gov
23
cve
2010
0985
directory traversal
vulnerability
joomla
remote attackers
arbitrary files
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.5%

Directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
chris_simoncom_abbrevMatch1.1
AND
joomlajoomla\!

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

85.5%

Related for CVE-2010-0985