SECUNIA ADVISORY ID:
A vulnerability has been reported in the MooFAQ component for
Joomla!, which can be exploited by malicious people to disclose
potentially sensitive information.
Input passed to the "file" parameter in
com_moofaq/includes/file_includer.php is not properly verified before
being used to display files, which can be exploited to disclose the
content of arbitrary files.
Edit the source code to ensure that input is properly verified.
PROVIDED AND/OR DISCOVERED BY:
Chip D3 Bi0s