CVE-2010-3426: Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla!

Security readout for executives and security teams

This flaw affects the JPhone component for Joomla and could let an unauthenticated remote attacker make the site include and run local files. For an exposed Joomla site using com_jphone 1.0 Alpha 3, the business risk is possible site compromise or sensitive file exposure. Exposure is likely limited to Joomla sites with the JPhone com_jphone component, specifically 1.0 Alpha 3 per the CVE description. The structured affected-product data is incomplete and lists n/a, so confirm by asset inventory rather than product metadata alone. Prioritize externally reachable Joomla sites first. This is an old component issue, but the potential impact is serious and public exploit references exist. If the component is present, handle as a near-term remediation item. Mitigation focus: Identify and inventory Joomla sites using com_jphone or JPhone 1.0 Alpha 3.; Check JPhone or Joomla maintainer guidance for a fixed release or retirement notice.; Remove or disable com_jphone where business use is not required..

Prepared

Jun 28, 2026, 01:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.