CVE-2007-4780 in CMS

Summary

Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 09/10/2007
• Disclosure: 09/10/2007
• Moderation: VulDB entry created
• Entries: VDB-38697 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.00045
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-4780
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-4780
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-4780/