CVE-2007-4185: Medium severity Joomla joomla vulnerability

Published Aug 8, 2007

Updated

Joomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for (1) Stat.php (2) OutputFilter.php, (3) OutputCache.php, (4) Modifier.php, (5) Reader.php, and (6) TemplateCache.php in includes/patTemplate/patTemplate/; (7) includes/Cache/Lite/Output.php; and other unspecified components, which reveal the path in various error messages.

Affected Software

1 affected component

Joomla joomla=1.0.12

Event History

Aug 8, 2007

CVE Published

01:17 AM

CVE Published

via MITRE·05:11 AM

Data Sourced

via MITRE·05:11 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4185?

CVE-2007-4185 has been rated as a moderate severity vulnerability.

How do I fix CVE-2007-4185?

The recommended fix for CVE-2007-4185 is to upgrade Joomla! to a newer, patched version.

What versions of Joomla! are affected by CVE-2007-4185?

CVE-2007-4185 specifically affects Joomla! version 1.0.12.

Can CVE-2007-4185 lead to data exposure?

Yes, CVE-2007-4185 can allow remote attackers to access sensitive information from specific PHP files.

Is CVE-2007-4185 an easy vulnerability to exploit?

CVE-2007-4185 can be exploited easily by sending direct requests to the vulnerable files.