Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php.
References
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2009-09-03 17:30
Updated : 2024-02-28 11:21
NVD link : CVE-2009-3053
Mitre link : CVE-2009-3053
CVE.ORG link : CVE-2009-3053
JSON object : View
Products Affected
jvitals
- com_agora
joomla
- joomla
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')