[20180601] - Core - Local File Inclusion with PHP 5.3

2018-06-26T00:00:00
ID JOOMLA-741
Type joomla
Reporter Open Source Matters, Inc.
Modified 2018-06-26T00:00:00

Description

Our autoload code checks classnames to be valid, using the "class_exists" function in PHP. In PHP 5.3 this function validates invalid names as valid, which can result in a Local File Inclusion.