CVE-2009-3946

Published: Nov 16, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request.

Affected (15)

Products: Joomla: Joomla!

Joomla

1 product

Joomla!

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla!	Up to 1.5.14
Joomla Joomla!	Version 1.5.0
Joomla Joomla!	Version 1.5.10
Joomla Joomla!	Version 1.5.11
Joomla Joomla!	Version 1.5.12
Joomla Joomla!	Version 1.5.13
Joomla Joomla!	Version 1.5.1
Joomla Joomla!	Version 1.5.2
Joomla Joomla!	Version 1.5.3
Joomla Joomla!	Version 1.5.4
Joomla Joomla!	Version 1.5.5
Joomla Joomla!	Version 1.5.6
Joomla Joomla!	Version 1.5.7
Joomla Joomla!	Version 1.5.8
Joomla Joomla!	Version 1.5.9