CVE-2010-1954

HIGH 7.5CVE-2010-1954 · Published 19/05/2010 · updated 16/06/2026

Package	Affected versions	Patched versions
com multiroot joomlacomponent.inetlanka	`= 1.0= 1.1`	No fix yet

Description

Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.

References

secunia.com/advisories/39531 · Vendor Advisory
exploit-db.com/exploits/12287 · Exploit
securityfocus.com/bid/39552 · Exploit
vupen.com/english/advisories/2010/0928 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free