CVE-2010-1657
NUCLEIcom_smartsite 1.0.0 - Path Traversal via Controller Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-1657. PoCs published by AntiSecurity. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla SmartSite component. The PoC shows how an attacker can read arbitrary files on the server by manipulating the 'controller' parameter in the URL.
Description
Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla SmartSite component. The PoC shows how an attacker can read arbitrary files on the server by manipulating the 'controller' parameter in the URL.