CVE-2010-0467

Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.

• CWE-22

• http://secunia.com/advisories/38378Broken Link, Third Party Advisory
• http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.htmlBroken Link, Vendor Advisory
• http://www.exploit-db.com/exploits/11277Third Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/11282Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/37987Broken Link, Exploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55953Third Party Advisory, VDB Entry
• http://secunia.com/advisories/38378Broken Link, Third Party Advisory
• http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.htmlBroken Link, Vendor Advisory
• http://www.exploit-db.com/exploits/11277Third Party Advisory, VDB Entry
• http://www.exploit-db.com/exploits/11282Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/37987Broken Link, Exploit, Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55953Third Party Advisory, VDB Entry

Published

Feb 2, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0460Multiple cross-site scripting (XSS) vulnerabilities in staff…
• CVE-2010-0461SQL injection vulnerability in the casino (com_casino) compo…
• CVE-2010-0462Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 be…
• CVE-2010-0463Horde IMP 4.3.6 and earlier does not request that the web br…
• CVE-2010-0464Roundcube 0.3.1 and earlier does not request that the web br…
• CVE-2010-0465Cross-site scripting (XSS) vulnerability in the online Docum…
• CVE-2010-0468Cross-site scripting (XSS) vulnerability in utilities/longpr…
• CVE-2010-0469SQL injection vulnerability in Files2Links F2L 3000 applianc…
• CVE-2010-0470Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in …
• CVE-2010-0471SQL injection vulnerability in the comment submission interf…
• CVE-2010-0472kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM D…
• CVE-2010-0475Cross-site scripting (XSS) vulnerability in esp/editUser.esp…