CVEvulnerability

CVE-2011-2890

5.0 MEDIUM Published 2011-07-27 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-07-27
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier allows remote attackers to obtain sensitive information via vectors involving the base variable, leading to disclosure of the installation path, a different vulnerability than CVE-2011-2488.

Affected configurations

• joomla joomla\! (<= 1.5.23) • joomla joomla\! 1.5.0 • joomla joomla\! 1.5.1 • joomla joomla\! 1.5.2 • joomla joomla\! 1.5.3 • joomla joomla\! 1.5.4 • joomla joomla\! 1.5.5 • joomla joomla\! 1.5.6 • joomla joomla\! 1.5.7 • joomla joomla\! 1.5.8 • joomla joomla\! 1.5.9 • joomla joomla\! 1.5.10 • joomla joomla\! 1.5.11 • joomla joomla\! 1.5.12 • joomla joomla\! 1.5.13 • joomla joomla\! 1.5.14 • joomla joomla\! 1.5.15 • joomla joomla\! 1.5.16 • joomla joomla\! 1.5.17 • joomla joomla\! 1.5.18 • joomla joomla\! 1.5.19 • joomla joomla\! 1.5.20 • joomla joomla\! 1.5.21 • joomla joomla\! 1.5.22

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References