CVE-2010-1305: Joomlamo Com Jinventory

Medium severity, CVSS 5.0. EPSS: 20.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in jinventory.php in the JInventory (com_jinventory) component 1.23.02 and possibly other versions before 1.26.03, a module for Joomla!, allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

Affected products

• Joomlamo Com Jinventory: version 1.23.02 only

Published 2010-04-08. Last modified 2026-06-16.