CVE-2010-2507: Masselink Com PICASA2GALLERY

Medium severity, CVSS 6.8. EPSS: 9.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Picasa2Gallery (com_picasa2gallery) component 1.2.8 and earlier for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.

Affected products

• Masselink Com PICASA2GALLERY: up to and including 1.2.8; version 1.0.0 only; version 1.1.0 only; version 1.1.7 only; version 1.1.9 only; version 1.2.1 only; …

Published 2010-06-28. Last modified 2026-06-16.