Description
A remote file inclusion vulnerability was reported in Joomla! core. It is possible for a remote attacker to extract a remotely hosted archive while you are extracting a backup archive or installing an update, depending on your server settings.
Affected versions:
Versions: 2.5.4 through 2.5.25, 3.2.5 and earlier 3.x versions, 3.3.0 through 3.3.4.
Remediation
Upgrade to the latest version of Joomla!.
References
Related Vulnerabilities
WordPress Plugin WP with Spritz Local/Remote File Inclusion (1.0)
WordPress Plugin WP Vault Local File Inclusion (0.8.6.6)
WordPress Plugin myFlash Remote File Include (1.10)
WordPress Plugin DM Albums 'album.php' Remote File Inclusion (1.9.2)
WordPress Plugin N-Media Website Contact Form with File Upload Local File Inclusion (1.5)