CVE-2010-1982

Name of the Vulnerable Software and Affected Versions Joomla! component com javoice version 2.0

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the view parameter to the "index.php" endpoint.

Recommendations For version 2.0, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the view parameter in the "index.php" endpoint to minimize the risk of exploitation.