CVE-2009-2015: Path Traversal

Published Jun 9, 2009

Updated

Directory traversal vulnerability in includes/fileincluder.php in the Ideal MooFAQ (commoofaq) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Affected Software

2 affected components

Joomla joomla

Ideal Com Moofaq=1.0

Event History

Jun 9, 2009

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

07:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-2015?

CVE-2009-2015 is classified as a medium severity vulnerability due to its potential for unauthorized file access.

How do I fix CVE-2009-2015?

To fix CVE-2009-2015, update the Ideal MooFAQ component to the latest version that is not affected by this vulnerability.

Who is affected by CVE-2009-2015?

CVE-2009-2015 affects Joomla! users who have the Ideal MooFAQ component version 1.0 installed.

What type of vulnerability is CVE-2009-2015?

CVE-2009-2015 is a directory traversal vulnerability that allows attackers to read arbitrary files on the server.

What does the attacker exploit in CVE-2009-2015?

Attackers exploit the file parameter to perform directory traversal attacks using the '..' sequence.