CVE-2010-2018

Published 24 May 2010 · Updated 07 Aug 2024

Follow this CVE

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

38Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 3.3%

from disclosure to weaponsame day

Published on NVDMay 24

1st PoCMay 18

Directory traversal vulnerability in downlot.php in Lokomedia CMS 1.4.1 and 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/12651 cve_referencepacketstormsecurity.org/1005-exploits/lokomediacms-disclose.txtunverified cve_referencewww.exploit-db.com/exploits/12651unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/64747 http://packetstormsecurity.org/1005-exploits/lokomediacms-disclose.txt http://secunia.com/advisories/39863 https://exchange.xforce.ibmcloud.com/vulnerabilities/58670 http://www.exploit-db.com/exploits/12651