CVE-2011-4804

NUCLEI

Foobla Com Obsuggest < 1.6.4 - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.

Exploits (1)

exploitdb WRITEUP VERIFIED

by the_cyber_nuxbie · textwebappsphp

https://www.exploit-db.com/exploits/36598

View Code ZIP pw:eip

Nuclei Templates (1)

Joomla! Component com_kp - 'Controller' Local File Inclusion

MEDIUMby daffainfo

References (3)

[Vendor Advisory] http://foobla.com/news/latest/obsuggest-1.8-security-release.html

[Vendor Advisory] http://secunia.com/advisories/46844

[Exploit] http://www.securityfocus.com/bid/48944

Scores

EPSS 0.1012

EPSS Percentile 93.1%

Details

CWE

CWE-22

Status published

Products (9)

foobla/com_obsuggest 1.5.0.1

foobla/com_obsuggest 1.5.1.1.20090922

foobla/com_obsuggest 1.5.1.2

foobla/com_obsuggest 1.5.1.4

foobla/com_obsuggest 1.5.1.5

foobla/com_obsuggest 1.5.1.6

foobla/com_obsuggest 1.5.1.7

foobla/com_obsuggest 1.6.1 b7 (2 CPE variants)

foobla/com_obsuggest < 1.6.4

Published Dec 14, 2011

Tracked Since Feb 18, 2026