A weakness and a vulnerability have been reported in the FLEXIcontent component for Joomla!, which can be exploited by malicious, local users to manipulate certain data and disclose sensitive information and by malicious people to compromise a vulnerable system.

1) The weakness is caused due to the component setting insecure permissions (777) for the "cache" directory. This can be exploited to e.g. modify, create, or delete files contained in this directory.

2) The vulnerability exists in the bundled version of phpThumb().

For more information:
SA39556

The weakness and the vulnerability are reported in versions prior to 1.5.

Solution
Update to version 1.5.

Provided and/or discovered by
1) Reported by the vendor.

Original Advisory
http://www.flexicontent.org/home/item/192-flexicontent-154-is-finally-out.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers