Description

The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message.

Remediation

References

CVE-2006-1956

Related Vulnerabilities

WordPress Plugin Relevanssi-A Better Search Cross-Site Scripting (3.5.7.1)

WordPress Plugin NotificationX-WooCommerce Sales Notification Popup, Custom & Live Sales Notification, FOMO, Social Proof, Announcement Banner & Sticky Notification Bar Cross-Site Request Forgery (1.8.2)

Oracle JRE CVE-2024-21144 Vulnerability (CVE-2024-21144)

MySQL CVE-2018-3173 Vulnerability (CVE-2018-3173)

MediaWiki Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-35624)

Severity

Medium

Classification

CVE-2006-1956

Tags

Missing Update Known Vulnerabilities