Mambo / Joomla do not properly validate user-supplied input in rss.php.A remote user can supply a specially crafted URL to cause the system to display an error message that discloses the installation Path or force the script to create Tons of superfluous xml files which in some cases results in remote DOS attacks against target.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45848/mambo-joomla.txt
Source: https://packetstormsecurity.com/files/45848/mambo-joomla.txt.html