Vulnerability Description
The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions (777) in unspecified folders, which allows local users to modify, create, or delete certain files.
CVSS Score
3.6
LOW
AV:L/AC:L/Au:N/C:P/I:P/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Simon Philips | Aardvertiser | 2.2.1 |
| Joomla | Joomla | All versions |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/40882Vendor Advisory
- http://sourceforge.net/projects/aardvertiser/forums/forum/989030/topic/3788365
- http://www.osvdb.org/66924
- http://www.securityfocus.com/bid/42239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60927
- http://secunia.com/advisories/40882Vendor Advisory
- http://sourceforge.net/projects/aardvertiser/forums/forum/989030/topic/3788365
- http://www.osvdb.org/66924
- http://www.securityfocus.com/bid/42239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60927
FAQ
What is CVE-2010-3028?
CVE-2010-3028 is a vulnerability with a CVSS score of 3.6 (LOW). The Aardvertiser component before 2.2.1 for Joomla! uses insecure permissions (777) in unspecified folders, which allows local users to modify, create, or delete certain files.
How severe is CVE-2010-3028?
CVE-2010-3028 has been rated LOW with a CVSS base score of 3.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2010-3028?
Check the references section above for vendor advisories and patch information. Affected products include: Simon Philips Aardvertiser, Joomla Joomla.