Directory traversal vulnerability in JRadio (com_jradio) component before 1.5.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php.
https://exchange.xforce.ibmcloud.com/vulnerabilities/64143
http://www.fxwebdesign.nl/index.php?option=com_content&view=article&id=20&Itemid=56