JCE Admin Component for Joomla Multiple Local File-Include Vulnerabilities

JCE Admin Component for Joomla Multiple Local File-Include Vulnerabilities

JCE Admin Component for Joomla is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Successful exploits may allow remote attackers to view arbitrary files and to execute local scripts in the context of the webserver process. Other attacks may also possible.

JCE Admin Component 1.1.0 beta 2 and prior versions are vulnerable.