CVE-2010-1313

2010-04-0820:30:00

CWE-22

mitre

web.nvd.nist.gov

cve-2010-1313

seber cart

joomla

directory traversal

vulnerability

remote attackers

arbitrary files

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.004

Percentile

75.3%

JSON

Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a … (dot dot) in the view parameter to index.php. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

sebercom_sebercartMatch1.0.0.12

sebercom_sebercartMatch1.0.0.13

AND

joomlajoomla\!

VendorProductVersionCPE
sebercom_sebercart1.0.0.12cpe:2.3:a:seber:com_sebercart:1.0.0.12:*:*:*:*:*:*:*
sebercom_sebercart1.0.0.13cpe:2.3:a:seber:com_sebercart:1.0.0.13:*:*:*:*:*:*:*
joomlajoomla\!*cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
seber	com_sebercart	1.0.0.12	cpe:2.3:a:seber:com_sebercart:1.0.0.12:::::::*
seber	com_sebercart	1.0.0.13	cpe:2.3:a:seber:com_sebercart:1.0.0.13:::::::*
joomla	joomla\!	*	cpe:2.3:a:joomla:joomla\!::::::::