Description

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Modifier.php, (5) Reader.php, and (6) TemplateCache.php in includes/patTemplate/patTemplate/; (7) includes/Cache/Lite/Output.php; and other unspecified components, which reveal the path in various error messages.

Remediation

References

CVE-2007-4185

Related Vulnerabilities

WordPress Plugin InBoundio Marketing Arbitrary File Upload (2.0.3)

WordPress Plugin Chief Editor Multiple Vulnerabilities (3.7.1)

Moodle Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-5153)

WordPress Plugin Compact WP Audio Player Cross-Site Scripting (1.9.7)

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-35959)

Severity

Medium

Classification

CVE-2007-4185

Tags

Missing Update Known Vulnerabilities