Description
feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via a "/" (slash) in the feed parameter to index.php, which reveals the path in an error message.
References
- 23815 vdb-entry
- 20060302 JOOMLA CMS 1.0.7 DoS & path disclosing mailing-list
- joomla-multiple-disclose-path(25028) vdb-entry
- http://www.joomla.org/content/view/938/78/
- 527 third-party-advisory