Security Advisory

CVE-2009-4946

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-07-22 18:00:00
Last updated 2024-08-07 07:24:53
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Directory traversal vulnerability in the Messaging (com_messaging) component before 1.5.1 for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the controller parameter in a messages action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.