Joomla Component com_ajaxchat 1.0 Remote File Include
Input passed to the "mosConfigabsolutepath" parameter in /components/comajaxchat/tests/ajcuser.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local or external resources. GLOBALSmosConfigabsolutepath Joomla Component...