CVE-2010-1954: Path Traversal
Directory traversal vulnerability in the iNetLanka Multiple root (commultiroot) component 1.0 and 1.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1954?
CVE-2010-1954 has a medium severity level due to the potential for remote file access.
How do I fix CVE-2010-1954?
To fix CVE-2010-1954, upgrade the iNetLanka Multiple root component to the latest version available.
What versions of Joomla! are affected by CVE-2010-1954?
CVE-2010-1954 specifically affects versions 1.0 and 1.1 of the iNetLanka Multiple root component.
Can CVE-2010-1954 lead to data leakage?
Yes, CVE-2010-1954 can lead to data leakage as it allows attackers to read arbitrary files on the server.
Is CVE-2010-1954 a known vulnerability in Joomla?
Yes, CVE-2010-1954 is a recognized vulnerability associated with the iNetLanka Multiple root component in Joomla.