CVE-2007-0375

Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for (1) plugins/user/example.php; (2) gmail.php, (3) example.php, or (4) ldap.php in plugins/authentication/; (5) modules/mod_mainmenu/menu.php; or other unspecified PHP scripts, which reveals the path in various error messages, related to a jimport function call at the beginning of each script.

• http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlExploit, Vendor Advisory
• http://osvdb.org/32522
• http://osvdb.org/32523
• http://osvdb.org/32524
• http://osvdb.org/32525
• http://osvdb.org/32526
• http://www.hackers.ir/advisories/festival.txtVendor Advisory
• http://www.securityfocus.com/archive/1/459203/100/0/threaded
• http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlExploit, Vendor Advisory
• http://osvdb.org/32522
• http://osvdb.org/32523
• http://osvdb.org/32524
• http://osvdb.org/32525
• http://osvdb.org/32526
• http://www.hackers.ir/advisories/festival.txtVendor Advisory
• http://www.securityfocus.com/archive/1/459203/100/0/threaded

Published

Jan 19, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0369SQL injection vulnerability in phpBP RC3 (2.204) and earlier…
• CVE-2007-0370Unrestricted file upload vulnerability in index.php in phpBP…
• CVE-2007-0371A certain ActiveX control in the Common Controls Replacement…
• CVE-2007-0372Multiple SQL injection vulnerabilities in Francisco Burzi PH…
• CVE-2007-0373Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta…
• CVE-2007-0374SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Be…
• CVE-2007-0376Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7…
• CVE-2007-0377Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow…
• CVE-2007-0378Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 all…
• CVE-2007-0379Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 a…
• CVE-2007-0380DocMan 1.3 RC2 allows remote attackers to obtain sensitive i…
• CVE-2007-0381Multiple SQL injection vulnerabilities in ATutor 1.5.3.2 all…