CVE-2010-0759
CVE-2010-0759
Vexday Risk Score
65High priority
SSVC decision (CISA)
Act
Exploitation + impact → act immediately
Exploit maturity
Functional exploit
Automatable exploit available (Nuclei/Metasploit).
CVSS —EPSS 15.2%KEV nãoPoC públicaNuclei simMetasploit —Patch —
Lifecycle
18 Feb 2010Public PoC
27 Feb 2010Published on NVD
Recommendation: Patch as soon as possible — active exploitation confirmed.
Directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files[] parameter, a different vector than CVE-2010-0760.
Affected products
n/a · n/apublic PoCs found — 3
cve_referencepacketstormsecurity.org/1002-exploits/joomlascriptegrator-lfi.txtunverifiedcve_referencewww.exploit-db.com/exploits/11498unverifiedexploitdbwww.exploit-db.com/exploits/11498unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.