Joomla! Ideal MooFAQ 1.0 via com_moofaq allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter (local file inclusion).
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view