Two vulnerabilities have been reported in the JE Form Creator component for Joomla!, which can be exploited by malicious people to disclose sensitive information and conduct SQL injection attacks.

1) Input passed via the "view" parameter to index.php (when "option" is set to "com_jeformcr") is not properly verified before being used to include files. This can be exploited to include arbitrary files from local resources via directory traversal sequences and URL-encoded NULL bytes.

Successful exploitation of this vulnerability requires that "magic_quotes_gpc" is disabled.

2) Input passed via the "id" parameter to index.php (when "option" is set to "com_jeformcr" and "view" is set to "form") is not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Solution
Edit the source code to ensure that input is properly verified and sanitised.

Provided and/or discovered by
1) Chip D3 Bi0s
2) Fl0riX

Changelog
Further details available to Secunia VIM customers

Original Advisory
Fl0riX:
http://packetstormsecurity.org/files/view/96562/joomlajeformcr-sql.txt

Deep Links
Links available to Secunia VIM customers