CVE-2007-4780

Joomla! 1.5 before RC2 aka Endeleo allows remote attackers to obtain sensitive information the full path via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories...

CVE-2007-4779

Cross-site scripting XSS vulnerability in Joomla! 1.5 before RC2 aka Endeleo allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the archive section...

CVE-2007-4779

CVE-2007-4779 is a cross-site scripting (XSS) vulnerability reported in Joomla! 1.5 before RC2 (Endeleo). The affected component is Joomla! 1.5 prior to RC2; the underlying issue is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, likely rel...

CVE-2007-4780

Joomla! 1.5 before RC2 aka Endeleo allows remote attackers to obtain sensitive information the full path via unspecified vectors, probably involving direct requests to certain PHP scripts in tmpl/ directories...