feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via a / (slash) in the feed parameter to index.php, which reveals the path in an error message.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Joomla | Joomla | 1.0.7 (including) | 1.0.7 (including) |