Joomla! Ideal MooFAQ 1.0 via com_moofaq allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter (local file inclusion).
View the template here CVE-2009-2015.yaml
References:
https://nvd.nist.gov/vuln/detail/CVE-2009-2015