CVE-2007-4780

Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2007-09-10

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Joomla (Joomla)

References

• http://osvdb.org/45875
• http://securityreason.com/securityalert/3108
• http://www.joomla.org/content/view/3831/1/
• http://www.securityfocus.com/archive/1/478451/100/0/threaded
• http://www.securityfocus.com/bid/25508
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36426