CVEvulnerability
CVE-2009-3053
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-09-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php.
Affected configurations
• jvitals com agora 3.0.0b
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://www.exploit-db.com/exploits/9564 www.exploit-db.com
- http://www.securityfocus.com/bid/36207 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52964 exchange.xforce.ibmcloud.com
- http://www.exploit-db.com/exploits/9564 www.exploit-db.com
- http://www.securityfocus.com/bid/36207 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52964 exchange.xforce.ibmcloud.com