CVE-2010-1715

Directory traversal vulnerability in the Online Examination (aka Online Exam or com_onlineexam) component 1.5.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.

• CWE-22

• http://packetstormsecurity.org/1004-exploits/joomlaonlineexam-lfi.txtExploit
• http://secunia.com/advisories/39414Vendor Advisory
• http://www.exploit-db.com/exploits/12174Exploit
• http://www.osvdb.org/63659
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57677
• http://packetstormsecurity.org/1004-exploits/joomlaonlineexam-lfi.txtExploit
• http://secunia.com/advisories/39414Vendor Advisory
• http://www.exploit-db.com/exploits/12174Exploit
• http://www.osvdb.org/63659
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57677

Published

May 4, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1709Multiple cross-site scripting (XSS) vulnerabilities in uploa…
• CVE-2010-1710Directory traversal vulnerability in login.php in Siestta 2.…
• CVE-2010-1711Cross-site scripting (XSS) vulnerability in carga_foto_al.ph…
• CVE-2010-1712Multiple cross-site scripting (XSS) vulnerabilities in base/…
• CVE-2010-1713SQL injection vulnerability in modules.php in PostNuke 0.764…
• CVE-2010-1714Directory traversal vulnerability in the Arcade Games (com_a…
• CVE-2010-1716SQL injection vulnerability in the Agenda Address Book (com_…
• CVE-2010-1717Directory traversal vulnerability in the iF surfALERT (com_i…
• CVE-2010-1718Directory traversal vulnerability in archeryscores.php in th…
• CVE-2010-1719Directory traversal vulnerability in the MT Fire Eagle (com_…
• CVE-2010-1720SQL injection vulnerability in the Q-Personel (com_qpersonel…
• CVE-2010-1721SQL injection vulnerability in the Intellectual Property (ak…