Published: 09/04/2010 Updated: 12/04/2010

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 510

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote malicious users to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cookex com_ckforms 1.3.3

#################################################################### >>>>> Author : altbta [l_9@hotmailcom<mailto:l_9@hotmailcom>] >>>>> Home : wwwv4-teamcom/cc<wwwv4-teamcom/cc> >>>>> Script : Joomla Component com_ckforms >>>>> Bug Type : Multiple Vulnerabilities ...

CWE-22 http://www.exploit-db.com/exploits/11785 http://www.osvdb.org/63031 http://secunia.com/advisories/38976 http://packetstormsecurity.org/1003-exploits/joomlackforms-lfisql.txt https://nvd.nist.gov https://www.exploit-db.com/exploits/11785/

CVE-2010-1345

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect