PT-2008-3380 · Joomla · Joomlaxplorer

Houssamix · Published 2008-04-16 · Updated 2017-09-29 · CVE-2008-1849

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions joomlaXplorer (com joomlaxplorer) versions 1.6.2 and earlier

Description The issue allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter in a "show error" action. This is a directory traversal vulnerability in the index.php file of the joomlaXplorer component.

Recommendations For versions 1.6.2 and earlier, consider restricting access to the dir parameter in the "show error" action of the index.php file until a patch is available. As a temporary workaround, disabling the "show error" action or limiting directory access can help minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-1849

Affected Products

Joomlaxplorer

References · 4

• 🔥 http://securityfocus.com/bid/28746 · Exploit
• 🔥 https://exploit-db.com/exploits/5431 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1849 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41778 · Note