VulnerabilityModified

CVE-2008-4764

Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote attackers to read arbitrary files via a ..

MEDIUM 5.0EPSS 16.5%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 16.5%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.

Description

Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter in a show_error action.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 16.50% probability · 97th percentile
CISA KEV: Not listed
Weakness: CWE-22
Affected: extplorer/com extplorer
Source: cve@mitre.org

References

http://www.securityfocus.com/bid/28764Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41873
https://www.exploit-db.com/exploits/5435
http://www.securityfocus.com/bid/28764Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41873
https://www.exploit-db.com/exploits/5435

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.