CVE-2010-2259

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

18.52%

Published

Jun 9, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBJoomla! Component com_bfsurvey - Local File Inclusion NucleiNuclei detection template TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

Weaknesses (CWE)

CWE-22

Affected Products (6)

tamlyncreative · com_bfsurvey_profreevulnerable

joomla · joomla\!

tamlyncreative · com_bfsurvey_provulnerable

joomla · joomla\!

tamlyncreative · com_bfsurvey_basicvulnerable

joomla · joomla\!

References (12)

http://osvdb.org/61438

http://packetstormsecurity.org/1001-exploits/joomlabfsurvey-lfi.txt

Exploit

http://secunia.com/advisories/37866

Vendor Advisory

http://www.exploit-db.com/exploits/10946

Exploit

http://www.securityfocus.com/bid/37584

Exploit

http://www.tamlyncreative.com.au/software/forum/index.php?topic=641.0

http://osvdb.org/61438

http://packetstormsecurity.org/1001-exploits/joomlabfsurvey-lfi.txt

Exploit

http://secunia.com/advisories/37866

Vendor Advisory

http://www.exploit-db.com/exploits/10946

Exploit

http://www.securityfocus.com/bid/37584

Exploit

http://www.tamlyncreative.com.au/software/forum/index.php?topic=641.0

KEV Catalog EPSS Scores Vendors All CVEs