CVE-2007-0375: Medium severity Joomla joomla vulnerability

Published Jan 19, 2007

Updated

Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for (1) plugins/user/example.php; (2) gmail.php, (3) example.php, or (4) ldap.php in plugins/authentication/; (5) modules/modmainmenu/menu.php; or other unspecified PHP scripts, which reveals the path in various error messages, related to a jimport function call at the beginning of each script.

Affected Software

1 affected component

Joomla joomla=1.5.0_beta

Event History

Jan 19, 2007

CVE Published

11:28 PM

Jan 20, 2007

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0375?

CVE-2007-0375 has a medium severity level due to information disclosure risks.

How do I fix CVE-2007-0375?

To fix CVE-2007-0375, it's recommended to upgrade to a later, patched version of Joomla! that addresses this vulnerability.

What types of sensitive information can CVE-2007-0375 expose?

CVE-2007-0375 can expose sensitive information such as file paths and potentially other server information.

Who is affected by CVE-2007-0375?

CVE-2007-0375 affects users running Joomla! version 1.5.0 Beta.

What actions should I take if I cannot patch CVE-2007-0375 immediately?

If immediate patching of CVE-2007-0375 is not possible, consider restricting access to the affected scripts to mitigate exposure.