Directory traversal vulnerability in the Pro Desk Support Center (com_pro_desk) component 1.0 and 1.2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the include_file parameter to index.php.

References

• https://nvd.nist.gov/vuln/detail/CVE-2008-6222
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46356
• https://www.exploit-db.com/exploits/6980
• http://secunia.com/advisories/32523
• http://www.securityfocus.com/bid/32113