CVE-2010-1858

NUCLEI

Gelembjuk Com Smestorage < 1.0 - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in the SMEStorage (com_smestorage) component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Chip d3 bi0s · textwebappsphp

https://www.exploit-db.com/exploits/11853

View Code ZIP pw:eip

Nuclei Templates (1)

Joomla! Component SMEStorage - Local File Inclusion

MEDIUMby daffainfo

References (5)

[Exploit] http://packetstormsecurity.org/1003-exploits/joomlasmestorage-lfi.txt

[Vendor Advisory] http://secunia.com/advisories/39071

[Exploit] http://www.exploit-db.com/exploits/11853

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/57108

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/38911

Scores

EPSS 0.0349

EPSS Percentile 87.6%

Details

CWE

CWE-22

Status published

Products (1)

gelembjuk/com_smestorage < 1.0

Published May 07, 2010

Tracked Since Feb 18, 2026