CVE-2010-1494

MEDIUM 5.0CVE-2010-1494 · Published 23/04/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
com awdwall awdsolution	`= 1.5.4`	No fix yet

Description

Directory traversal vulnerability in the AWDwall (com_awdwall) component 1.5.4 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

References

packetstormsecurity.org/1004-exploits/joomlaawdwall-lfisql.txt · Exploit
secunia.com/advisories/39553 · Vendor Advisory
awdwall.com/index.php/awdwall-updates-logs- · Vendor Advisory
exploit-db.com/exploits/12113 · Exploit
osvdb.org/63943
securityfocus.com/bid/39331 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/57693

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free