CVE-2010-1056

Name of the Vulnerable Software and Affected Versions com rokdownloads versions prior to 1.0.1

Description The issue allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to "index.php". This is a directory traversal vulnerability in the com rokdownloads component for Joomla!.

Recommendations For versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the "index.php" endpoint to minimize the risk of exploitation. Avoid using the controller parameter in the affected endpoint until the issue is resolved.