Lucene search

MitreCVE-2010-1056

HistoryMar 23, 2010 - 5:30 p.m.

CVE-2010-1056

2010-03-2317:30:00

CWE-22

mitre

web.nvd.nist.gov

cve-2010-1056

directory traversal

rokdownloads

joomla

remote attack

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.065

Percentile

93.8%

JSON

Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the controller parameter to index.php.

Affected configurations

Nvd

Node

rocketthemecom_rokdownloadsRange≤1.0

rocketthemecom_rokdownloadsMatch0.91a

rocketthemecom_rokdownloadsMatch0.92a

rocketthemecom_rokdownloadsMatch0.93a

rocketthemecom_rokdownloadsMatch0.94a

rocketthemecom_rokdownloadsMatch0.95a

rocketthemecom_rokdownloadsMatch0.96a

rocketthemecom_rokdownloadsMatch0.97a

rocketthemecom_rokdownloadsMatch0.98a

rocketthemecom_rokdownloadsMatch1.0b1

rocketthemecom_rokdownloadsMatch1.0b2

rocketthemecom_rokdownloadsMatch1.0b3

rocketthemecom_rokdownloadsMatch1.0b4

rocketthemecom_rokdownloadsMatch1.0b5

rocketthemecom_rokdownloadsMatch1.0b6

rocketthemecom_rokdownloadsMatch1.0b7

rocketthemecom_rokdownloadsMatch1.0b8

rocketthemecom_rokdownloadsMatch1.0b9

AND

joomlajoomla\!

VendorProductVersionCPE
rocketthemecom_rokdownloads*cpe:2.3:a:rockettheme:com_rokdownloads:*:*:*:*:*:*:*:*
rocketthemecom_rokdownloads0.91cpe:2.3:a:rockettheme:com_rokdownloads:0.91:a:*:*:*:*:*:*
rocketthemecom_rokdownloads0.92cpe:2.3:a:rockettheme:com_rokdownloads:0.92:a:*:*:*:*:*:*
rocketthemecom_rokdownloads0.93cpe:2.3:a:rockettheme:com_rokdownloads:0.93:a:*:*:*:*:*:*
rocketthemecom_rokdownloads0.94cpe:2.3:a:rockettheme:com_rokdownloads:0.94:a:*:*:*:*:*:*
rocketthemecom_rokdownloads0.95cpe:2.3:a:rockettheme:com_rokdownloads:0.95:a:*:*:*:*:*:*
rocketthemecom_rokdownloads0.96cpe:2.3:a:rockettheme:com_rokdownloads:0.96:a:*:*:*:*:*:*
rocketthemecom_rokdownloads0.97cpe:2.3:a:rockettheme:com_rokdownloads:0.97:a:*:*:*:*:*:*
rocketthemecom_rokdownloads0.98cpe:2.3:a:rockettheme:com_rokdownloads:0.98:a:*:*:*:*:*:*
rocketthemecom_rokdownloads1.0cpe:2.3:a:rockettheme:com_rokdownloads:1.0:b1:*:*:*:*:*:*

Vendor	Product	Version	CPE
rockettheme	com_rokdownloads	*	cpe:2.3:a:rockettheme:com_rokdownloads::::::::
rockettheme	com_rokdownloads	0.91	cpe:2.3:a:rockettheme:com_rokdownloads:0.91:a::::::
rockettheme	com_rokdownloads	0.92	cpe:2.3:a:rockettheme:com_rokdownloads:0.92:a::::::
rockettheme	com_rokdownloads	0.93	cpe:2.3:a:rockettheme:com_rokdownloads:0.93:a::::::
rockettheme	com_rokdownloads	0.94	cpe:2.3:a:rockettheme:com_rokdownloads:0.94:a::::::
rockettheme	com_rokdownloads	0.95	cpe:2.3:a:rockettheme:com_rokdownloads:0.95:a::::::
rockettheme	com_rokdownloads	0.96	cpe:2.3:a:rockettheme:com_rokdownloads:0.96:a::::::
rockettheme	com_rokdownloads	0.97	cpe:2.3:a:rockettheme:com_rokdownloads:0.97:a::::::
rockettheme	com_rokdownloads	0.98	cpe:2.3:a:rockettheme:com_rokdownloads:0.98:a::::::
rockettheme	com_rokdownloads	1.0	cpe:2.3:a:rockettheme:com_rokdownloads:1.0:b1::::::