Sammy Forgit has reported a vulnerability in the Easy Flash Uploader module for Joomla!, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the plugins/content/efup_files/helper.php script allowing the upload of files with arbitrary extensions to a folder inside the webroot. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script.
The vulnerability is reported in version 2.0. Prior versions may also be affected.
Vulnerable Products
Vulnerable Software: Easy Flash Uploader 2.x (module for Joomla!)
