CVE-2010-1858

CVE-2010-1858 describes a directory traversal vulnerability in the SMEStorage component (com_smestorage) for Joomla! versions prior to 1.1. This flaw allows unauthenticated remote attackers to read arbitrary files on the server by manipulating the 'controller' parameter in index.php. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and potential for unauthorized information disclosure. While not listed on CISA's KEV catalog, exploit code is publicly available on ExploitDB and Nuclei templates exist, suggesting it could be exploited. There is no evidence of active exploitation or significant community discussion.