28 matches found
Design/Logic Flaw
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message...
Design/Logic Flaw
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to cause a denial of service disk consumption and possibly web-server outage via multiple requests with different values of the feed parameter...
CVE-2006-1957
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to cause a denial of service disk consumption and possibly web-server outage via multiple requests with different values of the feed parameter...
CVE-2006-1956
The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message...
PT-2006-2941 · Joomla +1 · Joomla! +1
Name of the Vulnerable Software and Affected Versions: Mambo affected versions not specified Joomla! affected versions not specified Description: The issue allows remote attackers to cause a denial of service, potentially leading to disk consumption and web-server outage, by making multiple...
PT-2006-2940 · Joomla +1 · Joomla! +1
Name of the Vulnerable Software and Affected Versions: Mambo affected versions not specified Joomla! affected versions not specified Description: The issue allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message. This is...
CVE-2006-1027
feedcreator.class.php aka the syndication component in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via a "/" slash in the feed parameter to index.php, which reveals the path in an error message...
CVE-2005-2110
WordPress 1.5.1.2 and earlier allows remote attackers to obtain sensitive information via 1 a direct request to menu-header.php or a "1" value in the feed parameter to 2 wp-atom.php, 3 wp-rss.php, or 4 wp-rss2.php, which reveal the path in an error message. NOTE: vector 1 was later reported to al...