CVE-2010-1980

CVE-2010-1980 describes a directory traversal vulnerability in the Joomla Flickr component (com_joomlaflickr) version 1.0.3 for Joomla!. This flaw allows unauthenticated remote attackers to include and execute arbitrary local files on the server by manipulating the 'controller' parameter in the index.php request with dot-dot-slash sequences. The vulnerability carries a high CVSS score of 7.5, indicating a critical risk due to its network-based attack vector, low attack complexity, and potential for partial compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score of 96/100 further emphasizes its severity. While not listed on the KEV catalog or Hot List, exploit code for this vulnerability is publicly available on ExploitDB and through Nuclei templates, suggesting a potential for exploitation. However, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.