← Database

CVE-2009-3053

MEDIUM CVSS: 6.8 Published: 2009-09-03 Modified: 2026-06-16

Description

Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php.

Affected Platforms

Jvitals Com AgoraJoomla Joomla

Weakness Type

CWE-22

References