The Joomla Agora component version 2.5.x Pantheon suffers from a local file inclusion vulnerability.
01ba5957315cf61ac22adc2847d10f62e297b6131b1fa44d25d747e71530de2f
Joomla Agora component version 3.0.0b suffers from a local file inclusion vulnerability.
743657d5798d4251c924f6a094eb327fc426f5d2ef9e1c76b1a88a47d21cd053