CVE-2010-1268

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• justVisual 2.0 - 'index.php' Local File Inclusion2010-03-25 · webapps · php · Verified

Impact

Directory traversal vulnerability in index.php in justVisual CMS 2.0, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files directory traversal sequences in the p parameter. NOTE: some of these details are obtained from third party information.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/63156
• http://packetstormsecurity.org/1003-exploits/justvisual-lfi.txt
• http://secunia.com/advisories/39093
• http://www.exploit-db.com/exploits/11876
• http://www.securityfocus.com/bid/38970
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57174
• http://osvdb.org/63156
• http://packetstormsecurity.org/1003-exploits/justvisual-lfi.txt
• http://secunia.com/advisories/39093
• http://www.exploit-db.com/exploits/11876
• http://www.securityfocus.com/bid/38970
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57174