CVE-2010-5280

EPSS 5.5%

Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabname parameter in a userProfile action to index.php. NOTE: this can be leveraged to execute arbitrary code by using the file upload feature.

Affected products

n/a · n/a

public PoCs found — 3

cve_referencepacketstormsecurity.org/1010-exploits/joomlacbe-lfi.txtunverified cve_referencewww.exploit-db.com/exploits/15222unverified exploitdbwww.exploit-db.com/exploits/15222unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.org/1010-exploits/joomlacbe-lfi.txt http://secunia.com/advisories/41741 https://exchange.xforce.ibmcloud.com/vulnerabilities/62375 https://exchange.xforce.ibmcloud.com/vulnerabilities/62376 http://www.exploit-db.com/exploits/15222 http://www.securityfocus.com/archive/1/514183/100/0/threaded http://www.securityfocus.com/bid/43873