CVE-2010-1345

MEDIUM 5.0CVE-2010-1345 · Published 09/04/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
com ckforms cookex	`= 1.3.3`	No fix yet

Description

Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

References

packetstormsecurity.org/1003-exploits/joomlackforms-lfisql.txt · Exploit
secunia.com/advisories/38976 · Vendor Advisory
exploit-db.com/exploits/11785 · Exploit
osvdb.org/63031

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free