CVE-2010-1979: Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla!

Security readout for executives and security teams

This is an old Joomla component flaw that could let a remote attacker read files from the web server if the Affiliate Datafeeds component build 880 is installed and reachable. The bundle does not provide a CVSS score, patch version, or evidence of active exploitation. Exposure is likely limited to Joomla sites that installed Affiliate Datafeeds com_datafeeds build 880. Internet-facing Joomla deployments using this component would have the highest risk. The source bundle does not identify other affected versions, vendors, or products. Prioritize affected internet-facing Joomla sites because arbitrary file read can expose configuration files, credentials, or sensitive business data. The scope may be narrow, but legacy CMS components often persist unnoticed. Mitigation focus: Inventory Joomla sites for Affiliate Datafeeds com_datafeeds build 880.; Check vendor or maintainer guidance for a fixed or supported version.; If no supported fix exists, remove or disable the affected component..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.