Some vulnerabilities have been discovered in AJA, which can be exploited by malicious people to disclose potentially sensitive information.

1) Input passed to the "currentlang" parameter in modules/Contact_Plus/admin/case.php and modules/Reviews/admin/case.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local resources.

2) Input passed to the "module_name" parameter in modules/Fancy_NewsLetter/admin/includes/FANCYNLOptions.php is not properly verified before being used to include files. This can be exploited to include arbitrary files from local resources.

Successful exploitation may require that "register_globals" is enabled.

The vulnerabilities are confirmed in version 1.2. Other versions may also be affected.

Solution
Edit the source code to ensure that input is properly verified.

Provided and/or discovered by
ahmadbady

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/7939

Deep Links
Links available to Secunia VIM customers