CVE-2010-1474: Directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for Joomla!

Security readout for executives and security teams

CVE-2010-1474 affects the Sweety Keeper Joomla component. A remote attacker could abuse a directory traversal flaw to read files from the server. For executives, the main concern is legacy public Joomla sites exposing sensitive configuration or credential material. The sources do not provide a CVSS score or confirmed active exploitation. Exposure is limited to Joomla installations with the Sweety Keeper component 1.5.x installed and reachable. Internet-facing legacy Joomla sites are the most likely risk. The supplied affected-product metadata is incomplete and lists no CPEs, so asset confirmation must come from local CMS inventories, extension lists, or server file review. Prioritize this for any public-facing legacy Joomla estate. The vulnerability can expose sensitive server files, and public exploit references increase practical risk. If no affected component is present, urgency drops substantially. If present on an internet-facing site, remediate quickly and assess possible credential exposure. Mitigation focus: Inventory Joomla sites for Sweety Keeper com_sweetykeeper 1.5.x.; Remove or disable the component if it is not business-critical.; Check vendor or archived Joomla extension guidance for a fixed release..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.