Thefactory

thefactory

4 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Com Blogfactory

com_blogfactory

Com Gadgetfactory

com_gadgetfactory

Com Lovefactory

com_lovefactory

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2010-1957 1Thefactory 1Com Lovefactory Apr 29, 2026 May 19, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 Directory traversal vulnerability in the Love Factory (com_lovefactory) component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
CVE-2010-1956 1Thefactory 1Com Gadgetfactory Apr 29, 2026 May 19, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.ph...Show more Directory traversal vulnerability in the Gadget Factory (com_gadgetfactory) component 1.0.0 and 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.Show less
CVE-2010-1955 1Thefactory 1Com Blogfactory Apr 29, 2026 May 19, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
CVE-2010-1600 1Thefactory 1Com Mediamall Apr 29, 2026 Apr 29, 2010 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in the Media Mall Factory (com_mediamall) component 1.0.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter to index.php.