Lucene search

K
cve[email protected]CVE-2010-4617
HistoryDec 29, 2010 - 10:33 p.m.

CVE-2010-4617

2010-12-2922:33:32
CWE-22
web.nvd.nist.gov
27
cve
directory traversal
vulnerability
jotloader
joomla
remote attack

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.1%

Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php.

Affected configurations

NVD
Node
kanichcom_jotloaderMatch2.2.1
AND
joomlajoomla\!

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

82.1%