CVE-2007-4780

Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories.

Link	Resource
http://www.joomla.org/content/view/3831/1/
http://www.securityfocus.com/bid/25508	Exploit Patch
http://securityreason.com/securityalert/3108
http://osvdb.org/45875
https://exchange.xforce.ibmcloud.com/vulnerabilities/36426
http://www.securityfocus.com/archive/1/478451/100/0/threaded

Configuration 1

cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*

---

Published : 2007-09-10 09:17

Updated : 2018-10-15 09:38

---

NVD link : CVE-2007-4780

Mitre link : CVE-2007-4780

No products.

CWE-20