Description (CNA)
Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.joomla.org/content/view/3831/1/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36426
- http://www.securityfocus.com/bid/25508
- http://securityreason.com/securityalert/3108
- http://www.securityfocus.com/archive/1/478451/100/0/threaded
- http://osvdb.org/45875
ADP enrichment
No English description supplied.