vendor:
Cmimarketplace
by:
H!tm@N
7.5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: Cmimarketplace
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: a:magnetic_merchandising_inc:cmimarketplace
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
Joomla Component Cmimarketplace Directory Traversal Vulnerability
A Directory Traversal vulnerability was discovered in Joomla Component Cmimarketplace. An attacker can exploit this vulnerability to gain access to sensitive files and directories stored on the server. The vulnerability exists due to insufficient sanitization of user-supplied input to the 'viewit' parameter in the 'index.php' script. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing directory traversal sequences (e.g. '/../../') to the vulnerable script. Successful exploitation of this vulnerability may result in unauthorized access to sensitive files and directories stored on the server.
Mitigation:
The vendor has released an update to address this vulnerability. Users are advised to update to the latest version of the component.
