CVE-2009-2100

NUCLEI

JoomlaPraise Projectfork <2.0.10 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2100. PoCs published by ByALBAYX. A Nuclei detection template is also available.

AI-analyzed exploit summary This is a writeup describing a Local File Inclusion (LFI) vulnerability in the Joomla Component Com_Projectfork. It provides a proof-of-concept URL pattern but does not include functional exploit code.

Description

Directory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfork) component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php.

Exploits (1)

exploitdb WRITEUP VERIFIED
by ByALBAYX · textwebappsphp
https://www.exploit-db.com/exploits/8946

This is a writeup describing a Local File Inclusion (LFI) vulnerability in the Joomla Component Com_Projectfork. It provides a proof-of-concept URL pattern but does not include functional exploit code.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: Joomla Component Com_Projectfork
No auth needed
Prerequisites: Joomla with Com_Projectfork component installed
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

Joomla! JoomlaPraise Projectfork 2.0.10 - Local File Inclusion
MEDIUMby daffainfo

References (3)

Core 3
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35378
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/55176
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/8946

Scores

EPSS 0.0186
EPSS Percentile 83.5%

Details

CWE
CWE-22
Status published
Products (1)
joomlapraise/com_projectfork 2.0.10
Published Jun 17, 2009
Tracked Since Feb 18, 2026