Joomla Component JE Job Local File Inclusion Vulnerability
Please view the original advisory here.
The Joomla component JE Job suffers from a Local File Inclusion vulnerability. Furthermore XSS attacks may be possible.
Example URI = index.php?option=com_jejob&view=../../../../../../etc/passwd%00
It is highly recommended to activate the PHP var OpenBaseDir and configure it correctly.
May 14th, 2010 in
LFI | tags: advisory, com_jejob, exploit, html code injection, je job component, local file inclusion, Security, vulnerability, XSS
[...] ORIGINAL ADVISORY: http://www.xenuser.org/2010/05/14/joomla-component-je-job-local-file-inclusion-vulnerability/ [...]