CVE-2010-1307

Published: Apr 8, 2010Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in the Magic Updater (com_joomlaupdater) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

Affected (19)

Products: Software.realtyna: Com Joomlaupdater

Software.realtyna

1 product

Com Joomlaupdater

Configuration A

19 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Software.realtyna Com Joomlaupdater	Version 1.0
Software.realtyna Com Joomlaupdater	Version 1.1
Software.realtyna Com Joomlaupdater	Version 1.2.1
Software.realtyna Com Joomlaupdater	Version 1.2.2
Software.realtyna Com Joomlaupdater	Version 1.2
Software.realtyna Com Joomlaupdater	Version 1.3.0
Software.realtyna Com Joomlaupdater	Version 1.3.1
Software.realtyna Com Joomlaupdater	Version 1.3.2
Software.realtyna Com Joomlaupdater	Version 1.4
Software.realtyna Com Joomlaupdater	Version 2.0.0
Software.realtyna Com Joomlaupdater	Version 2.0.1
Software.realtyna Com Joomlaupdater	Version 2.0.2
Software.realtyna Com Joomlaupdater	Version 2.0.3
Software.realtyna Com Joomlaupdater	Version 2.0.4
Software.realtyna Com Joomlaupdater	Version 2.0.5
Software.realtyna Com Joomlaupdater	Version 2.0.6
Software.realtyna Com Joomlaupdater	Version 2.0.7
Software.realtyna Com Joomlaupdater	Version 2.0.8
Software.realtyna Com Joomlaupdater	Version 3.0.0