Joomla Simple File Lister module versions 1.0 and below suffer from a directory traversal vulnerability.