CVE-2010-2920

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-07-30 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the Foobla Suggestions (com_foobla_suggestions) component 1.5.1.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.

Affected products

Foobla Com Foobla Suggestions: 1.5.1.2

References

http://packetstormsecurity.org/1004-exploits/joomlafoobla-lfi.txt
http://www.exploit-db.com/exploits/12120
http://www.securityfocus.com/bid/39341
http://www.vupen.com/english/advisories/2010/1844
https://exchange.xforce.ibmcloud.com/vulnerabilities/57660
http://packetstormsecurity.org/1004-exploits/joomlafoobla-lfi.txt
http://www.exploit-db.com/exploits/12120
http://www.securityfocus.com/bid/39341
http://www.vupen.com/english/advisories/2010/1844
https://exchange.xforce.ibmcloud.com/vulnerabilities/57660

Get alerted when CVE-2010-2920 or the next vulnerability affects your stack