Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-2045. PoCs published by Chip d3 bi0s. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component Dione Form Wizard. The vulnerability allows remote attackers to include arbitrary files by manipulating the 'controller' parameter with a null byte termination.
Description
Directory traversal vulnerability in the Dione Form Wizard (aka FDione or com_dioneformwizard) component 1.0.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.
Exploits (1)
This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component Dione Form Wizard. The vulnerability allows remote attackers to include arbitrary files by manipulating the 'controller' parameter with a null byte termination.