CVE-2011-4804

CVE-2011-4804 describes a directory traversal (local file inclusion) vulnerability in Joomla! component obSuggest (com_obsuggest) prior to version 1.8. An attacker can use a .. in the controller parameter to index.php to read arbitrary local files. The issue affects the Joomla! obSuggest componen...