medium5.0
CVE-2011-2890
The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla!
Impact
The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier allows remote attackers to obtain sensitive information via vectors involving the base variable, leading to disclosure of the installation path, a different vulnerability than CVE-2011-2488.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | through 1.5.23 Versions 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.5.4 |