← back
CVE-2009-3946

CVE-2009-3946

EPSS 1.2%
Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://developer.joomla.org/security/news/306-20091103-core-xml-file-read-issue.htmlhttp://secunia.com/advisories/37262https://exchange.xforce.ibmcloud.com/vulnerabilities/54160http://www.osvdb.org/59800