The Percha components for Joomla are prone to multiple local file-include vulnerabilities due to improper sanitization of user-supplied input. An attacker can exploit these vulnerabilities to obtain sensitive information and execute arbitrary local scripts in the context of the webserver process, potentially compromising the application and the computer. Other attacks are also possible.