CVE-2010-0467
MEDIUM NUCLEIChillcreations Com Ccnewsletter - Path Traversal
Title source: ruleDescription
Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by AtT4CKxT3rR0r1ST · textwebappsphp
https://www.exploit-db.com/exploits/11282
Nuclei Templates (1)
Joomla! Component CCNewsLetter - Local File Inclusion
MEDIUMby daffainfo
References (6)
Scores
CVSS v3
5.8
EPSS
0.0294
EPSS Percentile
86.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Classification
CWE
CWE-22
Status
draft
Affected Products (1)
chillcreations/com_ccnewsletter
Timeline
Published
Feb 02, 2010
Tracked Since
Feb 18, 2026