Mass Joomla Component LFI Attacks Identified

Joomla Component LFI Vulnerabilities Joomla has hundreds of Controller components. Check out the Joomla Extension site for examples. Unfortunately, the vast majority of these components have LFI vulnerabilities. The vulnerability details are pretty much the same - The vulnerable page is "index.php". The "option" parameter is set to "com_xxxxxx" where xxxx is the vulnerable component name. Input passed via the "controller" parameter is not properly verified before being used to in