Description

The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier allows remote attackers to obtain sensitive information via vectors involving the base variable, leading to disclosure of the installation path, a different vulnerability than CVE-2011-2488.

Remediation

References

CVE-2011-2890

Related Vulnerabilities

WordPress Plugin Smart Email Alerts Cross-Site Scripting (1.0.10)

Citrix NetScaler Information Disclosure 'Citrix Bleed' (CVE-2023-4966)

WordPress Plugin WP DS FAQ 'ajax.php' SQL Injection (1.3.2)

MySQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2013-1861)

Oracle Database Server CVE-2009-1969 Vulnerability (CVE-2009-1969)

Severity

Medium

Classification

CVE-2011-2890 CWE-200

Tags

Missing Update Known Vulnerabilities