Crackers_Child has reported a vulnerability in the mosListMessenger component for Mambo, which can be exploited by malicious people to compromise a vulnerable system.

Input passed to the "mosConfig_absolute_path" parameter in components/com_lm/archive.php isn't properly verified, before it is used to include files. This can be exploited to include arbitrary files from external and local resources.

Solution
Edit the source code to ensure that input is properly verified.

Provided and/or discovered by
Crackers_Child

Changelog
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers