Environ problem

Hi,

tonight i've found an anonymous user that visited this link:
../component/flexicontent/?controller=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron\0

Somebody call it "local file inclusion".
Do you know anything about this?

no sorry ...

Yesterday a site i was created had a sql injection... from flexicontent!
Do you know qhat could it be????

.
Please provide some actual evidence.
If there really is a vulnerability in FLEXIcontent people here would like to know specifics in order to fix it.

Note: your example in your first post above is a very old attack which targets poorly configured vulnerable servers.
It has nothing to do specifically with Joomla or FLEXIcontent.

.

The message above was sent by a plugin that control every local file inclusion in my site and send a log in my mail.
I don't really know what does that message mean...

.
What you have posted above is a logged hack attempt.
It is a well known and very old hack attempt on *nix servers which are not secured properly.
It has nothing to do with Joomla/FLEXIcontent specifically.
Search and you will find this hack attempt on many different websites running PHP with many different applications.
The fact that it used a com_flexicontent link for the hack attempt is only because that is the link found by the hacker's spider.

It does not show anything actually happening.
Logged hack attempts are not evidence of an actual breach.

Again, if you have some actual evidence that a hack occurred via an actual vulnerability in FLEXIcontent, please post the evidence here so it can be fixed.

.