CVE-2010-0467

MEDIUM 5.8CVE-2010-0467 · Published 02/02/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
com ccnewsletter chillcreations	`= 1.0.5`	No fix yet

Description

Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.

References

secunia.com/advisories/38378 · Broken Link
chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.html · Broken Link
exploit-db.com/exploits/11277 · Third Party Advisory
exploit-db.com/exploits/11282 · Third Party Advisory
securityfocus.com/bid/37987 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/55953 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free