CVE-2010-2920

NUCLEI

Joomla! com_foobla_suggestions 1.5.1.2 - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Chip d3 bi0s · textwebappsphp

https://www.exploit-db.com/exploits/12120

View Code ZIP pw:eip

Nuclei Templates (1)

Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion

MEDIUMby daffainfo

References (5)

[Exploit] http://packetstormsecurity.org/1004-exploits/joomlafoobla-lfi.txt

[Exploit] http://www.exploit-db.com/exploits/12120

[Exploit] http://www.securityfocus.com/bid/39341

[Vendor Advisory] http://www.vupen.com/english/advisories/2010/1844

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/57660

Scores

EPSS 0.0357

EPSS Percentile 87.8%

Details

CWE

CWE-22

Status published

Products (1)

foobla/com_foobla_suggestions 1.5.1.2

Published Jul 30, 2010

Tracked Since Feb 18, 2026