CVE-2010-1607
NUCLEIPaysyspro Com Wmi - Path Traversal
Title source: ruleDescription
Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface (aka WMI or com_wmi) component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by wishnusakti + inc0mp13te · textwebappsphp
https://www.exploit-db.com/exploits/12316
Nuclei Templates (1)
Joomla! Component WMI 1.5.0 - Local File Inclusion
MEDIUMby daffainfo
References (5)
Scores
EPSS
0.0205
EPSS Percentile
83.9%
Details
CWE
CWE-22
Status
published
Products (1)
paysyspro/com_wmi
1.5.0
Published
Apr 29, 2010
Tracked Since
Feb 18, 2026