medium6.8
CVE-2007-4780
Joomla!
Impact
Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla | Versions 1.5.0_beta, 1.5.0_beta2, 1.5.0_rc1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/45875
- http://securityreason.com/securityalert/3108
- http://www.joomla.org/content/view/3831/1/
- http://www.securityfocus.com/archive/1/478451/100/0/threaded
- http://www.securityfocus.com/bid/25508
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36426
- http://osvdb.org/45875
- http://securityreason.com/securityalert/3108
- http://www.joomla.org/content/view/3831/1/
- http://www.securityfocus.com/archive/1/478451/100/0/threaded
- http://www.securityfocus.com/bid/25508
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36426