What is CVE-2009-3318?

CVE-2009-3318 is a vulnerability in Breedveld Com Album, classified under Path Traversal. Published 2009-09-23.

Is CVE-2009-3318 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Path Traversal in Breedveld Com Album

CVE-2009-3318

Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote attackers to access arbitrary directories and have unspecified other impact via a .. (dot dot) in the target parameter to index.php.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.065 (93.0th percentile) — read the EPSS interpretation.

Affected products

Breedveld Com_album — versions 1.14
Joomla
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

Public proof-of-concept exploits

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)

Frequently asked questions

What is CVE-2009-3318?: CVE-2009-3318 is a vulnerability in Breedveld Com Album, classified under Path Traversal. Published 2009-09-23.
Is CVE-2009-3318 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.