CVE-2010-1217: Je Form Creator

Medium severity, CVSS 4.3. EPSS: 6.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE: the original researcher states that the affected product is JE Tooltip, not Form Creator; however, the exploit URL suggests that Form Creator is affected.

Affected products

• Je Form Creator Je Form Creator: any version

Published 2010-03-30. Last modified 2026-06-16.