Joomla! En Masse Component Local and Remote File Include Vulnerabilities

Bugtraq ID:	54926
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Aug 09 2012 12:00AM
Updated:	Aug 09 2012 12:00AM
Credit:	Joomla! Extension Dictionary
Vulnerable:
Not Vulnerable:

Joomla! En Masse Component Local and Remote File Include Vulnerabilities

Joomla! En Masse Component is prone to a local file-include vulnerability and a remote file-include vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues may allow an attacker to execute arbitrary local and remote scripts in the context of the web server process or obtain potentially sensitive information. This may result in a compromise of the application and the underlying system; other attacks are also possible.

Versions prior to En Masse 3.1.3 are vulnerable.

Joomla! En Masse Component Local and Remote File Include Vulnerabilities

An attacker can exploit these issues through a browser.

Joomla! En Masse Component Local and Remote File Include Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

Joomla! En Masse Component Local and Remote File Include Vulnerabilities

References: