CVE-2010-1878: Directory traversal vulnerability in the OrgChart (com_orgchart) component 1.0.0 for Joomla!

Security readout for executives and security teams

This CVE affects the OrgChart component for Joomla. A remote attacker could abuse improper path handling to read files from the server. For a business, the concern is exposure of configuration files, credentials, or other sensitive local data on affected public websites. Exposure is limited to Joomla sites running the OrgChart com_orgchart component version 1.0.0, especially internet-facing sites. The bundle does not prove other versions or products are affected. Treat exposed affected sites as urgent cleanup, especially if they host sensitive data or credentials. The vulnerability is old, public, and potentially useful for data theft, but the bundle does not show active exploitation. Mitigation focus: Inventory Joomla sites for com_orgchart version 1.0.0.; Remove or disable com_orgchart if it is not business-critical.; Check vendor or project guidance for a fixed supported release..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.