Description
A remote file inclusion vulnerability was reported in Joomla! core. It is possible for a remote attacker to extract a remotely hosted archive while you are extracting a backup archive or installing an update, depending on your server settings.
Affected versions:
Versions: 2.5.4 through 2.5.25, 3.2.5 and earlier 3.x versions, 3.3.0 through 3.3.4.
Remediation
Upgrade to the latest version of Joomla!.
References
Related Vulnerabilities
WordPress Plugin Wechat Broadcast Local/Remote File Inclusion (1.2.0)
Joomla! Core 3.3.x Remote File Inclusion (3.3.0 - 3.3.4)
WordPress Plugin jQuery Mega Menu Widget 'skin' Parameter Local File Include (1.0)
WordPress Plugin MDC YouTube Downloader Local File Inclusion (2.1.0)
WordPress Plugin PictPress 'resize.php' Multiple Local File Include Vulnerabilities (1.0)