This host is installed Joomla! with Scriptegrator plugin and is prone to multiple local file inclusion vulnerabilities.

Successful exploitation could allow attackers to perform directory traversal attacks and read arbitrary files on the affected application. Impact Level: Application

Upgrade to Joomla! Scriptegrator plugin Version 2.0.9 or later. For updates refer to http://www.greatjoomla.com/extensions/plugins/core-design-scriptegrator-plugin.html

The flaws are caused by improper validation of user-supplied input via the multiple parameter to multiple files, which allows attackers to read arbitrary files via a ../(dot dot) sequences.

Joomla! Scriptegrator plugin Version 1.5.5, Other versions may also be affected.

• http://www.exploit-db.com/exploits/17394
• http://www.greatjoomla.com/extensions/plugins/core-design-scriptegrator-plugin.html

---

Updated on 2015-03-25