CWE-22

High likelihood

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Parent: CWE-706 - Use of Incorrectly-Resolved Name or Reference

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

9,291 vulnerabilities with CWE-22
CVE-2010-1607
com_wmi 1.5.0 - Path Traversal via Controller Parameter
CVE-2010-1603
Zimbllc Com Zimbcore - Path Traversal
CVE-2010-1602
ZiMB Comment 0.8.1 - Path Traversal via Controller Parameter
CVE-2010-1601
JA Comment (com_jacomment) - Path Traversal via View Parameter
CVE-2010-1589
Rocksalt International VP-ASP Shopping Cart <6.50 - Path Traversal
CVE-2010-1540
MyBlog (com_myblog) 3.0.329 - Path Traversal via Task Parameter
CVE-2010-1537
phpCDB < 1.0 - Remote File Inclusion via Lang Global Parameter
CVE-2010-1535
Joomla! com_travelbook 1.0.1 - Path Traversal
CVE-2010-1534
com_shoutbox - Path Traversal via Controller Parameter
CVE-2010-1533
com_tweetla 1.0.1 - Path Traversal via Controller Parameter
CVE-2010-1532
Joomla! com_powermail 1.5.3 - Path Traversal
CVE-2010-1531
Joomla! com_redshop 1.0.x - Path Traversal
CVE-2010-1495
Matamko com_matamko 1.01 - Path Traversal via Controller Parameter
CVE-2010-1494
Joomla! com_awdwall 1.5.4 - Path Traversal
CVE-2010-1492
Elastix 1.6.0 - Path Traversal via id_nodo Parameter
CVE-2010-1491
MMS Blog (com_mmsblog) 2.3.0 - Path Traversal
CVE-2010-1478
Joomla! com_jfeedback 1.2 - Path Traversal
CVE-2010-1476
Joomla! com_alphauserpoints 1.5.5 - Path Traversal
CVE-2010-1475
Joomla! com_preventive 1.0.5 - Path Traversal
CVE-2010-1474
Joomla! com_sweetykeeper <1.5 - Path Traversal
CVE-2010-1473
Joomla! com_advertising 0.25 - Path Traversal
CVE-2010-1472
Joomla! com_horoscope <1.5.0 - Path Traversal
CVE-2010-1471
Joomla! com_addressbook <1.5.0 - Path Traversal
CVE-2010-1470
Joomla! com_webtv 1.0 - Path Traversal
CVE-2010-1469
Joomla! com_jprojectmanager 1.0 - Path Traversal
Details
Vulnerabilities 9,291
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits