CVE-2010-2680

Directory traversal vulnerability in the JExtensions JE Section/Property Finder (jesectionfinder) component for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the view parameter to index.php.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

4.85% chance of exploitation in the next 30 days, 92nd percentile

Nuclei

medium · CWE-22

Published

2010-07-09

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/14064

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2680.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/14064

Security advisories

• http://www.securityfocus.com/bid/41163

References

• CVE Record
• NVD entry