CVE-2010-2037

CVE-2010-2037 describes a directory traversal vulnerability in the Percha Downloads Attach (com_perchadownloadsattach) component 1.1 for Joomla!. This flaw allows remote attackers to read arbitrary files by manipulating the 'controller' parameter with directory traversal sequences (e.g., '..') in requests to index.php. Rated with a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. The EPSS score is low, suggesting a low likelihood of exploitation in the wild. While not listed in CISA's KEV catalog, exploit code is publicly available on ExploitDB, and Nuclei templates exist for detection. There is no evidence of active exploitation or significant community discussion surrounding this decade-old vulnerability.