Description
A remote file inclusion vulnerability was reported in Joomla! core. It is possible for a remote attacker to extract a remotely hosted archive while you are extracting a backup archive or installing an update, depending on your server settings.
Affected versions:
Versions: 2.5.4 through 2.5.25, 3.2.5 and earlier 3.x versions, 3.3.0 through 3.3.4.
Remediation
Upgrade to the latest version of Joomla!.
References
Related Vulnerabilities
WordPress Plugin WordPress Ad Widget Local File Inclusion (2.11.0)
WordPress Plugin kk Star Ratings 'root' Parameter Remote File Include (1.7)
WordPress Plugin Adavnced Video embed Local File Inclusion (1.0)
WordPress Plugin Booking Calendar Local File Inclusion (7.0)
WordPress Plugin Localize My Post Local File Inclusion (1.0)