Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-1494. PoCs published by AntiSecurity. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates Local File Inclusion (LFI) and SQL Injection (SQLi) vulnerabilities in the Joomla component AWDwall version 1.5.4. The LFI allows reading arbitrary files via path traversal, while the SQLi enables unauthorized database queries.
Description
Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Exploits (1)
This exploit demonstrates Local File Inclusion (LFI) and SQL Injection (SQLi) vulnerabilities in the Joomla component AWDwall version 1.5.4. The LFI allows reading arbitrary files via path traversal, while the SQLi enables unauthorized database queries.