CVE-2010-1056

CVE-2010-1056 describes a directory traversal vulnerability in the RokDownloads component (com_rokdownloads) for Joomla! versions prior to 1.0.1. This flaw allows unauthenticated remote attackers to include and execute arbitrary local files on the server by manipulating the 'controller' parameter in a crafted URL. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring moderate attack complexity but potentially leading to partial confidentiality, integrity, and availability impacts. While not listed on the CISA KEV catalog, public exploit code exists on ExploitDB and Nuclei templates, indicating readily available methods for exploitation, though there is no evidence of widespread active exploitation or significant community discussion.