CVE-2010-1056

nvd nist nuclei

Published: Mar 23, 2010Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in the RokDownloads (com_rokdownloads) component before 1.0.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

Affected (18)

Products: Rockettheme: Com Rokdownloads

1 product

Com Rokdownloads

Configuration A

18 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Rockettheme Com Rokdownloads	Up to 1.0
Rockettheme Com Rokdownloads	Version 0.91 a
Rockettheme Com Rokdownloads	Version 0.92 a
Rockettheme Com Rokdownloads	Version 0.93 a
Rockettheme Com Rokdownloads	Version 0.94 a
Rockettheme Com Rokdownloads	Version 0.95 a
Rockettheme Com Rokdownloads	Version 0.96 a
Rockettheme Com Rokdownloads	Version 0.97 a
Rockettheme Com Rokdownloads	Version 0.98 a
Rockettheme Com Rokdownloads	Version 1.0 b1
Rockettheme Com Rokdownloads	Version 1.0 b2
Rockettheme Com Rokdownloads	Version 1.0 b3
Rockettheme Com Rokdownloads	Version 1.0 b4
Rockettheme Com Rokdownloads	Version 1.0 b5
Rockettheme Com Rokdownloads	Version 1.0 b6
Rockettheme Com Rokdownloads	Version 1.0 b7
Rockettheme Com Rokdownloads	Version 1.0 b8
Rockettheme Com Rokdownloads	Version 1.0 b9

Running on/with	Platform Versions
Joomla Joomla!	All versions

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (14)

http://osvdb.org/62972

Source: cve@mitre.org

http://packetstormsecurity.org/1003-exploits/joomlarokdownloads-lfi.txt

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/38982

Source: cve@mitre.org

Vendor Advisory

http://www.exploit-db.com/exploits/11760

Source: cve@mitre.org

Exploit

http://www.rockettheme.com/extensions-updates/638-rokdownloads-10-released

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/38741

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/56898

Source: cve@mitre.org

http://osvdb.org/62972

Source: af854a3a-2127-422b-91ae-364da2661108

http://packetstormsecurity.org/1003-exploits/joomlarokdownloads-lfi.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/38982

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.exploit-db.com/exploits/11760

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.rockettheme.com/extensions-updates/638-rokdownloads-10-released

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/38741

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/56898

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.