← Database

CVE-2009-3946

MEDIUM CVSS: 5.0 Published: 2009-11-16 Modified: 2026-06-16

Description

Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request.

Affected Platforms

Joomla Joomla\!

Weakness Type

CWE-200

References