Vulnerability · NVD published 2010-04-08
CVE-2010-1304
Directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Signals
- Exploited in the wild
- Not on KEVNot in CISA's catalogue as of the last daily pull. Absence is not proof of safety.
- EPSS · 30-day forecast
- 14%Chance of exploitation in the next 30 days, 97th percentile of all CVEs. A forecast; KEV outranks it.
- CVSS · NVD
- 5.0AV:N/AC:L/Au:N/C:P/I:N/A:N
- Internet exposure
- not stated by sourcesNo exposure census on this CVE's dispatches.
Exploits
2 known · links onlyExploit-DB1
created 2010-04-01
Nuclei1
A directory traversal vulnerability in userstatus.php in the User Status (com_userstatus) component 1.21.16 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
yaml · seen 2026-10-18
Detections
3 rules · Sigma · QRadar · CortexGenerated by skopnix from this finding, each with false-positive notes. Open the list →
On the wire
0 dispatchesNo dispatch on our wire has named this CVE yet.
Watch this one?
KEV additions reach Telegram and the KEV-only RSS as they land.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.