CVE-2006-1956

Name of the Vulnerable Software and Affected Versions Mambo (affected versions not specified) Joomla! (affected versions not specified)

Description The issue allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message. This is related to the com rss option in the rss.php file.

Recommendations For Mambo, consider restricting access to the rss.php file until a fix is available. For Joomla!, avoid using the com rss option with invalid feed parameters until the issue is resolved.