Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-1305. PoCs published by Chip d3 bi0s. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla JInventory component. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter in the URL.
Description
Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla JInventory component. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter in the URL.