What is CVE-2009-3053?

CVE-2009-3053 is a vulnerability in Joomla, classified under Path Traversal. Published 2009-09-03.

Is CVE-2009-3053 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Joomla

CVE-2009-3053

Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.059 (92.5th percentile) — read the EPSS interpretation.

Affected products

Joomla
Jvitals Com_agora — versions 3.0.0b
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

Public proof-of-concept exploits

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2009-3053?: CVE-2009-3053 is a vulnerability in Joomla, classified under Path Traversal. Published 2009-09-03.
Is CVE-2009-3053 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.