Kochsuite version 0.9.4, the Mambo/Joomla CMS component, suffers from a remote file inclusion vulnerability.