Description

The com_rss option (rss.php) in (1) Mambo and (2) Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message.

Remediation

References

CVE-2006-1956

Related Vulnerabilities

ownCloud Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-4716)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-7480)

Envoy Proxy Uncontrolled Resource Consumption Vulnerability (CVE-2020-12603)

WordPress Plugin Ultimate Gift Cards For WooCommerce Cross-Site Request Forgery (2.1.1)

PostgreSQL Resource Management Errors Vulnerability (CVE-2007-4772)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-1956