CVE-2010-1315

CVE-2010-1315 describes a directory traversal vulnerability in the webERPcustomer component (com_weberpcustomer) for Joomla! versions 1.2.1 and 1.x before 1.06.02. This flaw allows remote attackers to read arbitrary files by manipulating the 'controller' parameter in index.php with dot-dot sequences. Rated with a CVSS score of 5.0, this vulnerability has a low attack complexity and requires no authentication, making it easily exploitable over the network to achieve partial confidentiality impact. While the EPSS score is low, indicating a lower likelihood of exploitation, its FAUCET Risk Score is high at 91/100. Although not listed in the KEV catalog and with no active exploitation reported, public exploit code exists on ExploitDB, and Nuclei templates are available. There is minimal community discussion or media coverage surrounding this CVE.