CVE-2010-0467: Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla!

Security readout for executives and security teams

CVE-2010-0467 is a directory traversal flaw in the ccNewsletter Joomla component version 1.0.5. A remote attacker could read files from the server if the vulnerable component is reachable. The main business risk is disclosure of configuration files, credentials, or other sensitive data from an old Joomla deployment. Exposure is most likely on legacy Joomla sites that still have ccNewsletter com_ccnewsletter 1.0.5 installed and publicly reachable. The bundle does not identify other affected versions or products. Prioritize remediation if any internet-facing Joomla site still runs this component. The issue is old, but public exploit references and possible credential exposure make unsupported legacy sites a practical business risk. Mitigation focus: Identify any Joomla installations using ccNewsletter com_ccnewsletter 1.0.5.; Review the vendor ccNewsletter 1.0.6 security release guidance.; Upgrade or remove the vulnerable component where it is present..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.