Joomla! FLEXIcontent component Insecure permissions and Command Injection Vulnerability

Release date:
Updated on:

Affected Systems:
Flexicontent 1.x
Description:
--------------------------------------------------------------------------------
Joomla! Is an Open Source Content Management System (CMS ).

Joomla! The FLEXIcontent component has a security vulnerability. Remote attackers may exploit this vulnerability to operate on certain data and leak sensitive information to control the affected system.

1) This vulnerability is caused by the insecure permissions of components in the "cache" directory. Attackers can exploit this vulnerability by modifying, creating, or deleting files in this directory.

2) this vulnerability is included in the accompanying phpThumb () version.

<**>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Flexicontent
------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.flexicontent.org/home/