CVE-2010-0972

2010-03-1618:26:00

mitre

www.cve.org

AI Score

Confidence

High

EPSS

0.01

Percentile

83.7%

JSON

Directory traversal vulnerability in the GCalendar (com_gcalendar) component 2.1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the controller parameter to index.php.

References

secunia.com/advisories/38925

www.exploit-db.com/exploits/11738

exchange.xforce.ibmcloud.com/vulnerabilities/56863