medium6.8Public exploit code
CVE-2010-1478
Directory traversal vulnerability in the Ternaria Informatica Jfeedback!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component Jfeedback 1.2 - Local File Inclusion2010-04-11 · webapps · php · Verified
Impact
Directory traversal vulnerability in the Ternaria Informatica Jfeedback! (com_jfeedback) component 1.2 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ternaria | Com Jfeedback | Version 1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/1004-exploits/joomlajfeedback-lfi.txt
- http://secunia.com/advisories/39262
- http://www.exploit-db.com/exploits/12145
- http://www.securityfocus.com/bid/39390
- http://packetstormsecurity.org/1004-exploits/joomlajfeedback-lfi.txt
- http://secunia.com/advisories/39262
- http://www.exploit-db.com/exploits/12145
- http://www.securityfocus.com/bid/39390