Description
Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request.
References
- http://developer.joomla.org/security/news/306-20091103-core-xml-file-read-issue.html
- 37262 third-party-advisory
- joomla-xml-information-disclosure(54160) vdb-entry
- 59800 vdb-entry