1 results (0.001 seconds)

CVSS: 6.5EPSS: 2%CPEs: 2EXPL: 4

02 Mar 2010 — Directory traversal vulnerability in the AutartiTarot (com_autartitarot) component 1.0.3 for Joomla! allows remote authenticated users, with "Public Back-end" group permissions, to read arbitrary files via directory traversal sequences in the controller parameter in an edit task to administrator/index.php. NOTE: some of these details are obtained from third party information. Vulnerabilidad de salto de directorio en el componente AutartiTarot (com_autartitarot) v1.0.3 para Joomla! permite a usuarios remotos... • https://www.exploit-db.com/exploits/33590 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •