Information disclosure in Joomla Joomla\!

CVE-2011-2890

The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier allows remote attackers to obtain sensitive information via vectors involving the base variable, leading to disclosure of the installation path, a different vulnerability than CVE-2011-2488.

Vulnerability class: Information Disclosure

EPSS: 0.011 (63.5th percentile) — read the EPSS interpretation.

Affected products

Joomla Joomla\! — versions 1.5.0, 1.5.1, 1.5.2
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_MLIST, Exploit)