[20120101] - Core - Information Disclosure

• Project: Joomla!
• SubProject: All
• Severity: Low
• Versions: 1.7.3 and all earlier 1.7 and 1.6 versions
• Exploit type: Information Disclosure
• Reported Date: 2012-January-07
• Fixed Date: 2012-January-24

Description

Inadequate filtering leads to information disclosure.

Affected Installs

Joomla! version 1.7.3 and all earlier versions

Solution

Upgrade to version 1.7.4 or 2.5.0 or higher

Reported by Erwan Peton - Intrinsec

Contact

The JSST at the Joomla! Security Center.