CVE:CVE-2010-2857
CNNVD:CNNVD-201007-255
Joomla!是一款开放源码的内容管理系统(CMS)。
Joomla!的Music Manager组件存在目录遍历漏洞。远程攻击者可以借助album.html的cid参数中的".."(点 点)符读取任意文件并且可能导致其他未明影响。
solution:Upgrade danieljamesscott com_music to a higher version than 0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,0.10,0.11,0.12,and avoid the version 0.1,0.2,0.3,0.4,0.5,0.6,0.7,0.8,0.9,0.10,0.11,0.12