CVE-2010-2122 in Com Simpledownload

Summary

Directory traversal vulnerability in the SimpleDownload (com_simpledownload) component before 0.9.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

06/01/2010

Disclosure

06/01/2010

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
53425	Joelrowley Com Simpledownload com_simpledownload index.php path traversal	22	Proof-of-Concept	Official fix	CVE-2010-2122
13482	Joomla CMS com_simpledownload path traversal	22	Proof-of-Concept	Official fix	CVE-2010-2122

Sources

• MITRE
• NVD
• CVE Details