high7.5Public exploit code
CVE-2010-1603
Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager collection for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component ZiMBCore 0.1 - Local File Inclusion2010-04-18 · webapps · php · Verified
Impact
Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager collection for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zimbllc | Com Zimbcore | Version 0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/1004-exploits/joomlazimbmanager-lfi.txt
- http://www.exploit-db.com/exploits/12284
- http://www.securityfocus.com/bid/39546
- http://www.vupen.com/english/advisories/2010/0931
- http://packetstormsecurity.org/1004-exploits/joomlazimbmanager-lfi.txt
- http://www.exploit-db.com/exploits/12284
- http://www.securityfocus.com/bid/39546
- http://www.vupen.com/english/advisories/2010/0931