← Database

CVE-2007-4780

MEDIUM CVSS: 6.8 Published: 2007-09-10 Modified: 2026-06-16

Description

Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories.

Affected Platforms

Joomla Joomla

Weakness Type

CWE-20

References