CVE-2010-0985

CVE-2010-0985 describes a directory traversal vulnerability in the Abbreviations Manager (com_abbrev) component 1.1 for Joomla!, allowing remote attackers to include and execute arbitrary local files. This flaw specifically impacts the 'chris_simon com_abbrev' and 'joomla com_abbrev' components. With a CVSS score of 7.5, this vulnerability is considered highly severe, as it can be exploited remotely with low attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. While not listed on CISA's KEV catalog, exploit code is publicly available through ExploitDB and Nuclei templates, indicating its exploitability. Despite this, there is no evidence of active exploitation or significant community discussion.