Joomla! Component Highslide 1.5 - Local File Inclusion
A directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
com_hsconfigPoC 已收录
CVSS5.0EPSS 0.99%