CVE-2010-1472

CVE-2010-1472 is a directory traversal vulnerability in the Daily Horoscope (com_horoscope) component 1.5.0 for Joomla!, affecting both Joomla! and Kazulah installations. This flaw allows unauthenticated remote attackers to read arbitrary files on the server by manipulating the 'controller' parameter in a crafted URL. With a CVSS score of 7.5, this vulnerability is considered high severity due to its low attack complexity and potential for unauthorized information disclosure. While not listed on CISA's KEV catalog, public exploit code exists on ExploitDB and Nuclei templates, indicating readily available exploitation methods, though there is no evidence of widespread active exploitation or significant community discussion.