Directory traversal

2010-05-0313:51:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

88.0%

JSON

Directory traversal vulnerability in the Code-Garage NoticeBoard (com_noticeboard) component 1.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a … (dot dot) in the controller parameter to index.php.

CPENameOperatorVersion
com_noticeboardeq1.3

CPE	Name	Operator	Version
	com_noticeboard	eq	1.3

References

packetstormsecurity.org/1004-exploits/joomlnoticeboard-lfi.txt

secunia.com/advisories/39600

www.securityfocus.com/bid/39742

www.vupen.com/english/advisories/2010/1007

exchange.xforce.ibmcloud.com/vulnerabilities/58176

www.exploit-db.com/exploits/12427