CVE-2010-2035

CVE-2010-2035 describes a directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla!. This flaw allows remote attackers to read arbitrary files and potentially achieve other unspecified impacts by manipulating the 'controller' parameter in index.php with directory traversal sequences. With a CVSS score of 7.5, this vulnerability is considered high severity due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, exploit code is publicly available via ExploitDB and Nuclei templates, though there is no evidence of active exploitation or significant community discussion.