CVE-2010-0676

Directory traversal vulnerability in index.php in the RWCards (com_rwcards) component 3.0.18 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2010-02-22

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Com Rwcards (Weberr)

References

• http://packetstormsecurity.org/1002-exploits/joomlarwcards-lfi.txt
• http://secunia.com/advisories/38638
• http://www.securityfocus.com/bid/38267