Joomla! 1.0.12 allows remote attackers to obtain sensitive information via...
Vulnerability Description
Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Modifier.php, (5) Reader.php, and (6) TemplateCache.php in includes/patTemplate/patTemplate/; (7) includes/Cache/Lite/Output.php; and other unspecified components, which reveal the path in various error messages.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-4185
Credits & Attribution
No credits recorded in the NVD database.
References
- http://osvdb.org/39043
- http://www.securityfocus.com/archive/1/475066/100/0/threaded
- http://osvdb.org/39037
- http://www.securityfocus.com/archive/1/480757/100/0/threaded
- http://osvdb.org/39038
- http://osvdb.org/39041
- http://www.securityfocus.com/archive/1/480738/100/0/threaded
- http://www.securityfocus.com/archive/1/480809/100/0/threaded
- http://osvdb.org/39039
- http://osvdb.org/39040
- http://osvdb.org/39042
More from joomla
View All →Affected Vendor
joomla
View all reports →Affected Software
Timeline
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.