Description

Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request.

Remediation

References

CVE-2009-3946

Related Vulnerabilities

Dot CMS Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-19138)

Apache HTTP Server Other Vulnerability (CVE-2003-0993)

Moodle Other Vulnerability (CVE-2022-40208)

MySQL CVE-2021-2072 Vulnerability (CVE-2021-2072)

Internet Information Services Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1256)

Severity

Medium

Classification

CVE-2009-3946 CWE-200

Tags

Missing Update Known Vulnerabilities