Vulnerability Database

313,519

Total vulnerabilities in the database

CVE-2007-4780

Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to obtain sensitive information (the full path) via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories.

Published: Sep 10, 2007
Updated: Nov 9, 2025
CVE: CVE-2007-4780
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-20

Affected Software
References

Software	From	Fixed in
Joomla / joomla	1.5.0_rc1	1.5.0_rc1.x
Joomla / joomla	1.5.0_beta2	1.5.0_beta2.x
Joomla / joomla	1.5.0_beta	1.5.0_beta.x

http://osvdb.org/45875
http://securityreason.com/securityalert/3108
http://www.joomla.org/content/view/3831/1/
http://www.securityfocus.com/archive/1/478451/100/0/threaded
http://www.securityfocus.com/bid/25508
https://exchange.xforce.ibmcloud.com/vulnerabilities/36426

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo