medium6.8Public exploit code
CVE-2010-2857
Directory traversal vulnerability in the Music Manager component for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component Music Manager - Local File Inclusion2010-07-08 · webapps · php · Verified
Impact
Directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the cid parameter to album.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Danieljamesscott | Com Music | Versions 0.1, 0.2, 0.3, 0.4, 0.5, 0.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/1007-exploits/joomlamusicmanager-lfi.txt
- http://www.exploit-db.com/exploits/14274
- http://www.securityfocus.com/bid/41485
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60195
- http://packetstormsecurity.org/1007-exploits/joomlamusicmanager-lfi.txt
- http://www.exploit-db.com/exploits/14274
- http://www.securityfocus.com/bid/41485
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60195