CVE-2010-1306: Roberto Aloi Com JOOMLAPICASA2

High severity, CVSS 7.5. EPSS: 15.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.

Affected products

• Roberto Aloi Com JOOMLAPICASA2: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only

Published 2010-04-08. Last modified 2026-06-16.