VYPR
Unrated severityNVD Advisory· Published Jan 19, 2007· Updated Jun 16, 2026

CVE-2007-0375

CVE-2007-0375

Description

Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for (1) plugins/user/example.php; (2) gmail.php, (3) example.php, or (4) ldap.php in plugins/authentication/; (5) modules/mod_mainmenu/menu.php; or other unspecified PHP scripts, which reveals the path in various error messages, related to a jimport function call at the beginning of each script.

Affected products

2
  • Joomla/Joomla!2 versions
    cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*
    • (no CPE)range: = 1.5.0 Beta

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.