Medium severity5.8NVD Advisory· Published Feb 2, 2010· Updated Jun 16, 2026
CVE-2010-0467
CVE-2010-0467
Description
Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:chillcreations:com_ccnewsletter:1.0.5:*:*:*:*:*:*:*
- Range: <=1.0.5
Patches
Vulnerability mechanics
References
6- www.securityfocus.com/bid/37987nvdBroken LinkExploitThird Party AdvisoryVDB Entry
- secunia.com/advisories/38378nvdBroken LinkThird Party Advisory
- www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.htmlnvdBroken LinkVendor Advisory
- www.exploit-db.com/exploits/11277nvdThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/11282nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/55953nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.