CVE-2010-1954 Scanner

The iNetLanka Multiple root component for Joomla! is designed to provide users with the ability to maintain multiple website roots within a single Joomla! installation. This component allows users to easily and efficiently manage multiple websites without the need to install separate Joomla! instances for each. This product is used by website developers and administrators to reduce overheads and streamline website management tasks.

The CVE-2010-1954 vulnerability in the iNetLanka Multiple root component for Joomla! allows remote attackers to read arbitrary files by exploiting a directory traversal vulnerability in the com_multiroot component. This vulnerability can be exploited by attackers by inserting a ".." in the controller parameter to index.php. Upon exploitation, attackers can gain access to files that they should not normally have access to, such as sensitive data or configuration files. 

When exploited, the CVE-2010-1954 vulnerability can lead to significant data breaches and privacy violations. Attackers can gain access to sensitive data and personally identifiable information from databases, configuration files, or other sensitive files. This vulnerability can also allow attackers to compromise web application servers, potentially leading to the installation of malware or other malicious software that can further compromise the security of digital assets.

Thanks to the pro features of securityforeveryone.com, website owners and administrators can easily and quickly learn about vulnerabilities in their digital assets. With features such as automated scanning and real-time monitoring, securityforeveryone.com provides users with unparalleled insight into their website's security posture. Plus, with expert support and guidance available around the clock, users can take proactive steps to prevent attacks and secure their digital assets effectively. So, act now and sign up for securityforeveryone.com today to take your website security to the next level!

REFERENCES

• http://www.exploit-db.com/exploits/12287
• http://www.securityfocus.com/bid/39552
• http://www.vupen.com/english/advisories/2010/0928