CVE-2006-1027: Joomla! Joomla

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

feedcreator.class.php (aka the syndication component) in Joomla! 1.0.7 allows remote attackers to obtain sensitive information via a "/" (slash) in the feed parameter to index.php, which reveals the path in an error message.

Affected products

• Joomla! Joomla: version 1.0.7 only

Published 2006-03-07. Last modified 2026-06-16.