CVE-2010-1714

Directory traversal vulnerability in the Arcade Games (com_arcadegames) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

• CWE-22

• http://packetstormsecurity.org/1004-exploits/joomlaarcadegames-lfi.txtExploit
• http://secunia.com/advisories/39413Vendor Advisory
• http://www.exploit-db.com/exploits/12168Exploit
• http://www.osvdb.org/63660
• http://www.vupen.com/english/advisories/2010/0860Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57683
• http://packetstormsecurity.org/1004-exploits/joomlaarcadegames-lfi.txtExploit
• http://secunia.com/advisories/39413Vendor Advisory
• http://www.exploit-db.com/exploits/12168Exploit
• http://www.osvdb.org/63660
• http://www.vupen.com/english/advisories/2010/0860Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57683

Published

May 4, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1708Multiple SQL injection vulnerabilities in agentadmin.php in …
• CVE-2010-1709Multiple cross-site scripting (XSS) vulnerabilities in uploa…
• CVE-2010-1710Directory traversal vulnerability in login.php in Siestta 2.…
• CVE-2010-1711Cross-site scripting (XSS) vulnerability in carga_foto_al.ph…
• CVE-2010-1712Multiple cross-site scripting (XSS) vulnerabilities in base/…
• CVE-2010-1713SQL injection vulnerability in modules.php in PostNuke 0.764…
• CVE-2010-1715Directory traversal vulnerability in the Online Examination …
• CVE-2010-1716SQL injection vulnerability in the Agenda Address Book (com_…
• CVE-2010-1717Directory traversal vulnerability in the iF surfALERT (com_i…
• CVE-2010-1718Directory traversal vulnerability in archeryscores.php in th…
• CVE-2010-1719Directory traversal vulnerability in the MT Fire Eagle (com_…
• CVE-2010-1720SQL injection vulnerability in the Q-Personel (com_qpersonel…