CVE-2010-1219

Name of the Vulnerable Software and Affected Versions Joomla! component com janews version 1.0

Description A directory traversal issue exists, allowing remote attackers to read arbitrary local files. This is achieved by including a .. (dot dot) in the controller parameter to "index.php".

Recommendations For version 1.0, consider restricting access to the "index.php" endpoint until a patch is available, or avoid using the controller parameter with untrusted input to minimize the risk of exploitation.