CVE-2010-0982
published 2010-03-16CVE-2010-0982: Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .…
PriorityP335medium4.3CVSS 2.0
AVNACMAuNCPINAN
EXPLOIT
EPSS
6.24%
92.7th percentile
Directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| joomlamo | com_cartweberp | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Exploit-DB
Joomla! Component com_cartweberp - Local File Inclusion
exploitdb·2010-01-03
CVE-2010-0982 Joomla! Component com_cartweberp - Local File Inclusion
Joomla! Component com_cartweberp - Local File Inclusion
---
@~~=======================================~~@
@~~=Script : Joomla Component com_cartweberp
@~~=Author : FL0RiX
@~~=Greez : Deep-Power ,KaCaK,Wretch-x & All Friends
@~~=Bug Type : Local File Inlusion(LFI)
@~~=Dork : inurl:"com_cartweberp"
@~~=======================================~~@
@~~=Vuln
:http://server/ [Yol] /index.php?option=com_cartweberp&controller=[-LFI-]
F....N;
Sen çok üstün zekaya sahip birisin,
emin olabilirsin, :)
Sql injection ile domain hackleyebilen tek lamersin, :)
ASP'de Rfi Bulmakta Birebirsin,
Ama Gördügüm En hIyar Lamersin :D
Bu Kafiyelerde Bi TarafIna Girsin ;)
Lol F....N :)
Nuclei
Joomla! Component com_cartweberp - Local File Inclusion
nuclei·CVSS 4.3
CVE-2010-0982 [MEDIUM] Joomla! Component com_cartweberp - Local File Inclusion
Joomla! Component com_cartweberp - Local File Inclusion
A directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Template:
id: CVE-2010-0982
info:
name: Joomla! Component com_cartweberp - Local File Inclusion
author: daffainfo
severity: medium
description: A directory traversal vulnerability in the CARTwebERP (com_cartweberp) component 1.56.75 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
impact: |
Allows an attacker to read arbitrary files on the server, leading to potential information disclosure and further exploitation.
remediation: Apply all relevant securi
http://osvdb.org/61447http://packetstormsecurity.org/1001-exploits/joomlacartweberp-lfi.txthttp://secunia.com/advisories/37917http://www.securityfocus.com/bid/37581http://osvdb.org/61447http://packetstormsecurity.org/1001-exploits/joomlacartweberp-lfi.txthttp://secunia.com/advisories/37917http://www.securityfocus.com/bid/37581
2010-03-16
Published