Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion

Joomla! Image Browser 0.1.5 rc2 is susceptible to local file inclusion via comimagebrowser which could allow remote attackers to include and execute arbitrary local files via a .. dot dot in the folder parameter to index.php. id: CVE-2008-4668 info: name: Joomla! Image Browser 0.1.5 rc2 - Local...

CVE-2008-4668

Joomla! Image Browser 0.1.5 rc2 is vulnerable to Local File Inclusion. The issue arises in com_imagebrowser where a crafted value in the folder parameter of index.php (…/index.php?option=com_imagebrowser&folder=..) can cause the system to include and execute arbitrary local files. Consequences in...