AntiSecurity

CVE-2010-2036 EXPLOITDB text WRITEUP

Percha Fields Attach 1.x - Path Traversal via Controller Parameter

Directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsattach) component 1.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-2035 EXPLOITDB text WRITEUP

Percha Gallery 1.6 Beta - Path Traversal via Controller Parameter

Directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-2034 EXPLOITDB text WRITEUP

Percha Image Attach 1.1 - Path Traversal via Controller Parameter

Directory traversal vulnerability in the Percha Image Attach (com_perchaimageattach) component 1.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-2033 EXPLOITDB text WRITEUP

Percha com_perchacategoriestree 0.6 - Path Traversal via Controller Parameter

Directory traversal vulnerability in the Percha Multicategory Article (com_perchacategoriestree) component 0.6 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1461 EXPLOITDB text WORKING POC

Joomla! com_photobattle 1.0.1 - Path Traversal

Directory traversal vulnerability in the Photo Battle (com_photobattle) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via the view parameter to index.php.

View Code

CVE-2010-1532 EXPLOITDB text WORKING POC

Joomla! com_powermail 1.5.3 - Path Traversal

Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1475 EXPLOITDB text WORKING POC

Joomla! com_preventive 1.0.5 - Path Traversal

Directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

EIP-2026-108842 EXPLOITDB text WORKING POC

Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion (1)

View Code

CVE-2010-1480 EXPLOITDB text WORKING POC

Joomla! com_rokmodule 1.1 - SQL Injection

SQL injection vulnerability in the RokModule (com_rokmodule) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the module parameter to index.php. NOTE: some of these details are obtained from third party information.

View Code

CVE-2010-1313 EXPLOITDB text WORKING POC

Seber Cart <1.0.0.12-1.0.0.13 - Path Traversal

Directory traversal vulnerability in the Seber Cart (com_sebercart) component 1.0.0.12 and 1.0.0.13 for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. NOTE: some of these details are obtained from third party information.

View Code

CVE-2010-1657 EXPLOITDB text WORKING POC

com_smartsite 1.0.0 - Path Traversal via Controller Parameter

Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1474 EXPLOITDB text WORKING POC

Joomla! com_sweetykeeper <1.5 - Path Traversal

Directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1535 EXPLOITDB text WORKING POC

Joomla! com_travelbook 1.0.1 - Path Traversal

Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1533 EXPLOITDB text WORKING POC

com_tweetla 1.0.1 - Path Traversal via Controller Parameter

Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1659 EXPLOITDB text WORKING POC

com_ultimateportfolio 1.0 - Path Traversal via Controller Parameter

Directory traversal vulnerability in the Ultimate Portfolio (com_ultimateportfolio) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1470 EXPLOITDB text WORKING POC

Joomla! com_webtv 1.0 - Path Traversal

Directory traversal vulnerability in the Web TV (com_webtv) component 1.0 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1602 EXPLOITDB text WORKING POC

ZiMB Comment 0.8.1 - Path Traversal via Controller Parameter

Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1603 EXPLOITDB text WORKING POC

Zimbllc Com Zimbcore - Path Traversal

Directory traversal vulnerability in the ZiMB Core (aka ZiMBCore or com_zimbcore) component 0.1 in the ZiMB Manager collection for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1471 EXPLOITDB text WORKING POC

Joomla! com_addressbook <1.5.0 - Path Traversal

Directory traversal vulnerability in the AddressBook (com_addressbook) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1656 EXPLOITDB perl WORKING POC

Airiny ABC 1.1.7 - SQL Injection via Sectionid Parameter

SQL injection vulnerability in the Airiny ABC (com_abc) component 1.1.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the sectionid parameter in an abc action to index.php.

View Code

CVE-2010-1494 EXPLOITDB text WORKING POC

Joomla! com_awdwall 1.5.4 - Path Traversal

Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

View Code

CVE-2010-1952 EXPLOITDB text WORKING POC

cmstactics com_beeheard and com_beeheardlite 1.0 - Path Traversal via Controller Parameter

Directory traversal vulnerability in the BeeHeard (com_beeheard) and BeeHeard Lite (com_beeheardlite) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

View Code

EIP-2026-108360 EXPLOITDB text WORKING POC

Joomla! Component com_google - Local File Inclusion

View Code

EIP-2026-108384 EXPLOITDB text WORKING POC

Joomla! Component com_jajobboard - Multiple Local File Inclusions

View Code

EIP-2026-108512 EXPLOITDB text WORKING POC

Joomla! Component com_record - Local File Inclusion

View Code