Description
Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories.
References
- http://www.joomla.org/content/view/3831/1/
- joomla-tmpl-information-disclosure(36426) vdb-entry
- 25508 vdb-entry
- 3108 third-party-advisory
- 20070903 Multiple vulnerabilities in Joomla 1.5 RC 1 mailing-list
- 45875 vdb-entry