Skip to content
skopnix
Dossier · Vulnerability

Vulnerability · NVD published 2010-02-02

CVE-2010-0467

Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.

Signals

Exploited in the wild
Not on KEVNot in CISA's catalogue as of the last daily pull. Absence is not proof of safety.
EPSS · 30-day forecast
43%Chance of exploitation in the next 30 days, 99th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD · MEDIUM
5.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

3 known · links only

Exploit-DB2

  1. Joomla! Component CCNewsLetter - Directory Traversal ↗

    created 2010-01-28

  2. Joomla! Component CCNewsLetter - Local File Inclusion ↗

    created 2010-01-28

Nuclei1

  1. Joomla! Component CCNewsLetter - Local File Inclusion ↗

    A directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php.

    yaml · seen 2026-10-18

Detections

3 rules · Sigma · QRadar · Cortex

  1. CVE exploitation

    CVE-2010-0467 exploitation attempt

    CVE-2010-0467

    T1190conf 70SIGAQLXQL

Generated by skopnix from this finding, each with false-positive notes. Open the list →

On the wire

0 dispatches

No dispatch on our wire has named this CVE yet.

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.