CVE-2009-3053

Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

5.92% chance of exploitation in the next 30 days, 93th percentile

Nuclei

medium · CWE-22

Published

2009-09-03

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/9564

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-3053.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9564

References

• CVE Record
• NVD entry

Related

• CVE-2009-3052
• CVE-2009-3054
• CVE-2009-3043
• CVE-2009-3055
• CVE-2009-3042
• CVE-2009-3056