CVE-2010-2680

Description

Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php.

Affected Platforms

Weakness Type

CWE-22

References

• http://packetstormsecurity.org/1006-exploits/joomlajesectionfinder-lfi.txt
• http://www.exploit-db.com/exploits/14064
• http://www.securityfocus.com/bid/41163
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59796
• http://packetstormsecurity.org/1006-exploits/joomlajesectionfinder-lfi.txt
• http://www.exploit-db.com/exploits/14064