CVE-2009-3053: Jvitals Com Agora

Medium severity, CVSS 6.8. EPSS: 5.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Agora (com_agora) component 3.0.0b for Joomla! allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter to the avatars page, reachable through index.php.

Affected products

• Jvitals Com Agora: version 3.0.0b only

Published 2009-09-03. Last modified 2026-06-16.