Published: 27/02/2010 Updated: 17/08/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote malicious users to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files[] parameter, a different vector than CVE-2010-0760.

Vulnerable Product	Search on Vulmon	Subscribe to Product
greatjoomla scriptegrator_plugin 1.4.1

# Exploit Title: Core Design Scriptegrator plugin for Joomla! 15 file inclusion # Author: S2 Crew [Hungary] # Tested on: Debian Linux, Apache, Joomla! 15 # Code: There's a file called jsloaderphp which takes an array of file names from the HTTP GET parameters and calls include() on every one of them -----------------8<-------------------- ...

CWE-22 http://secunia.com/advisories/38637 http://www.securityfocus.com/bid/38296 http://packetstormsecurity.org/1002-exploits/joomlascriptegrator-lfi.txt http://www.osvdb.org/62486 http://www.exploit-db.com/exploits/11498 https://exchange.xforce.ibmcloud.com/vulnerabilities/56380 https://nvd.nist.gov https://www.exploit-db.com/exploits/11498/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-0759

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect