CVE-2006-1027

CVE-2006-1027 describes an information disclosure vulnerability in Joomla! 1.0.7, specifically within its feedcreator.class.php syndication component. An unauthenticated remote attacker can exploit this by injecting a slash character into the 'feed' parameter of index.php, causing an error message that reveals the full path of the web application. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it allows for partial confidentiality impact without requiring authentication or complex attack methods. Despite its age, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.