CVE-2010-2034

CVE-2010-2034 describes a directory traversal vulnerability in the Percha Image Attach component 1.1 for Joomla!. This flaw allows unauthenticated remote attackers to read arbitrary files and potentially cause further impact by manipulating the 'controller' parameter with dot-dot-slash sequences. With a CVSS score of 7.5, this vulnerability is easily exploitable over the network with low attack complexity, leading to potential confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB and Nuclei templates exist, indicating a clear path for exploitation. Despite this, there is no evidence of active exploitation or significant community discussion.