A Local File Inclusion (LFI) vulnerability exists in the com_market version 2.x component of Joomla. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable server. This request contains a maliciously crafted parameter which can be used to include arbitrary files from the server. This can be used to gain access to sensitive information such as configuration files, source code, etc.
A local file inclusion vulnerability exists in the Joomla Component Memory Book version 1.2. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable application. This can allow the attacker to include a file from the local system which can lead to information disclosure, denial of service, and remote code execution.
A local file inclusion vulnerability exists in the com_joommail version 1.0 component of Joomla. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable server. This request contains a maliciously crafted parameter value which can be used to include arbitrary files from the server.
A Local File Inclusion (LFI) vulnerability exists in the com_onlineexam version 1.5.0 component for Joomla. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable server. This request contains a maliciously crafted parameter which can be used to include arbitrary files from the server. This can be used to gain access to sensitive information such as configuration files, source code, etc.
A Local File Inclusion (LFI) vulnerability exists in the com_myfiles version 1.0 component of Joomla. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable server. This request contains a maliciously crafted parameter which can be used to include arbitrary files from the server. This can be used to gain access to sensitive information such as configuration files, source code, etc.
A Local File Inclusion (LFI) vulnerability exists in the com_cvmaker version 1.0 component of Joomla. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable server. This request contains a maliciously crafted parameter which can be used to include arbitrary files from the server. This can be used to gain access to sensitive information such as configuration files, source code, etc.
A local file inclusion vulnerability exists in the com_advertising version 0.25 component of Joomla. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing directory traversal characters to the vulnerable application. This can allow the attacker to include arbitrary local files on the web server.
A local file inclusion vulnerability exists in com_addressbook version 1.5.0, which allows an attacker to include a file from the local system. This can be exploited to disclose sensitive information by including files from the local system, such as the /etc/passwd file. The vulnerability is due to insufficient sanitization of user-supplied input to the 'controller' parameter in the 'index.php' script.
A local file inclusion vulnerability exists in the com_flashgames version 1.5.0 component of Joomla. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to the vulnerable server. This request contains malicious input to the 'controller' parameter of the vulnerable component. This input is then used to include a file from the local system, allowing an attacker to view the contents of the file.
A local file inclusion vulnerability exists in the com_arcadegames version 1.0 component for Joomla. An attacker can exploit this vulnerability by sending a specially crafted HTTP request containing directory traversal characters (e.g. '../') to the vulnerable server. This can allow the attacker to include and execute arbitrary local files on the vulnerable system.
Services By CQR