CVE-2010-0760: Multiple directory traversal vulnerabilities in the Core Design Scriptegrator plugin 1.4.1 for Joomla!

Security readout for executives and security teams

This CVE concerns an old Joomla plugin, Core Design Scriptegrator 1.4.1. The reported flaw could let a remote attacker make the site include and execute local files through vulnerable loader scripts. The record warns that the details come only from third-party information, so treat exposure seriously but verify locally. Exposure is most likely on legacy Joomla sites that still run Core Design Scriptegrator 1.4.1 and expose the referenced loader PHP files to remote users. The source bundle does not identify broader product versions, CPEs, or fixed releases. Prioritize this for legacy Joomla estate review, especially internet-facing sites. The technical impact could be serious, but evidence quality is limited and no active exploitation is cited. Treat it as a targeted legacy-platform cleanup item unless local exposure is confirmed. Mitigation focus: Inventory Joomla sites for Core Design Scriptegrator plugin version 1.4.1.; Check Core Design or historical Joomla extension advisories for fixed or safe versions.; Remove or disable the plugin if it is unnecessary or unsupported..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.