CVE

Id
28137  
CVE No.
CVE-2007-4780  
Status
Candidate  
Description
Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories.  
Phase
Assigned (20070910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
291847 28137 CVE-2007-4780 BUGTRAQ:20070903 Multiple vulnerabilities in Joomla 1.5 RC 1  View
291848 28137 CVE-2007-4780 URL:http://www.securityfocus.com/archive/1/archive/1/478451/100/0/threaded  View
291849 28137 CVE-2007-4780 CONFIRM:http://www.joomla.org/content/view/3831/1/  View
291850 28137 CVE-2007-4780 BID:25508  View
291851 28137 CVE-2007-4780 URL:http://www.securityfocus.com/bid/25508  View
291852 28137 CVE-2007-4780 OSVDB:45875  View
291853 28137 CVE-2007-4780 URL:http://osvdb.org/45875  View
291854 28137 CVE-2007-4780 SREASON:3108  View
291855 28137 CVE-2007-4780 URL:http://securityreason.com/securityalert/3108  View
291856 28137 CVE-2007-4780 XF:joomla-tmpl-information-disclosure(36426)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52475 JVNDB-2007-001167 PHP の glob 関数および fnmatch 関数におけるサービス運用妨害 (DoS) の脆弱性 PHP には、glob() 関数に渡す pattern パラメータおよび fnmatch() 関数に渡す string パラメータの取り扱いに不備があり、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2007-4782 28137 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001167.html  View