CVE-2010-1875

Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.

• CWE-22

• http://secunia.com/advisories/39074Vendor Advisory
• http://www.exploit-db.com/exploits/11851
• http://www.osvdb.org/63143
• http://www.securityfocus.com/bid/38912Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57110
• http://secunia.com/advisories/39074Vendor Advisory
• http://www.exploit-db.com/exploits/11851
• http://www.osvdb.org/63143
• http://www.securityfocus.com/bid/38912Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57110

Published

May 12, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-1869Stack-based buffer overflow in the parser function in GhostS…
• CVE-2010-1870The OGNL extensive expression evaluation capability in XWork…
• CVE-2010-1871JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Appl…8.8
• CVE-2010-1872Cross-site scripting (XSS) vulnerability in cPlayer.php in F…
• CVE-2010-1873SQL injection vulnerability in the Jvehicles (com_jvehicles)…
• CVE-2010-1874SQL injection vulnerability in the Real Estate Property (com…
• CVE-2010-1876SQL injection vulnerability in index.php in AJ Shopping Cart…
• CVE-2010-1877SQL injection vulnerability in the JTM Reseller (com_jtm) co…
• CVE-2010-1878Directory traversal vulnerability in the OrgChart (com_orgch…
• CVE-2010-1879Unspecified vulnerability in Quartz.dll for DirectShow; Wind…
• CVE-2010-1880Unspecified vulnerability in Quartz.dll for DirectShow on Mi…
• CVE-2010-1881The FieldList ActiveX control in the Microsoft Access Wizard…