Joomla! Unspecified Information Disclosure Vulnerabilities

Bugtraq ID:	50188
Class:	Input Validation Error
CVE:	CVE-2011-3629 CVE-2011-4937
Remote:	Yes
Local:	No
Published:	Oct 18 2011 12:00AM
Updated:	Mar 19 2015 08:34AM
Credit:	Jeff Channell and Aung Khant
Vulnerable:	SocialMPN SocialMPN 1.0.5 Joomla Joomla! 1.7.1 Joomla Joomla! 1.6.6 Joomla Joomla! 1.6.4 Joomla Joomla! 1.6.2 Joomla Joomla! 1.6.1 Joomla Joomla! 1.5.23 Joomla Joomla! 1.5.22 Joomla Joomla! 1.5.20 Joomla Joomla! 1.5.19 Joomla Joomla! 1.5.18 Joomla Joomla! 1.5.17 Joomla Joomla! 1.5.16 Joomla Joomla! 1.5.15 Joomla Joomla! 1.5.14 Joomla Joomla! 1.5.12 Joomla Joomla! 1.5.11 Joomla Joomla! 1.5.10 Joomla Joomla! 1.5.9 Joomla Joomla! 1.5.8 Joomla Joomla! 1.5.7 Joomla Joomla! 1.5.5 Joomla Joomla! 1.5.4 Joomla Joomla! 1.5.2 Joomla Joomla! 1.5.1 Joomla Joomla! 1.7.0 Joomla Joomla! 1.6.5 Joomla Joomla! 1.6.3 Joomla Joomla! 1.6.1 Joomla Joomla! 1.6.0 Joomla Joomla! 1.6 RC1 Joomla Joomla! 1.6 Beta9 Joomla Joomla! 1.6 Beta8 Joomla Joomla! 1.6 Beta7 Joomla Joomla! 1.6 Beta6 Joomla Joomla! 1.6 Beta5 Joomla Joomla! 1.6 Beta4 Joomla Joomla! 1.6 Beta3 Joomla Joomla! 1.6 Beta2 Joomla Joomla! 1.6 Beta15 Joomla Joomla! 1.6 Beta14 Joomla Joomla! 1.6 Beta13 Joomla Joomla! 1.6 Beta12 Joomla Joomla! 1.6 Beta11 Joomla Joomla! 1.6 Beta10 Joomla Joomla! 1.6 Beta1 Joomla Joomla! 1.6 Alpha2 Joomla Joomla! 1.6 Alpha Joomla Joomla! 1.5.6 Joomla Joomla! 1.5.3 Joomla Joomla! 1.5.21 Joomla Joomla! 1.5.15 Rc Joomla Joomla! 1.5.13 Joomla Joomla! 1.5.0 Joomla Joomla 1.7 Joomla Joomla 1.6.5 Joomla Joomla 1.6.4 Joomla Joomla 1.6.3 Joomla Joomla 1.6 Joomla Joomla 1.5.22 Joomla Joomla 1.5.21 Joomla Joomla 1.5.20 Joomla Joomla 1.5.19 Joomla Joomla 1.5.18 Joomla Joomla 1.5.17 Joomla Joomla 1.5.16 Joomla Joomla 1.5.15 Joomla Joomla 1.5.14 Joomla Joomla 1.5.13 Joomla Joomla 1.5.12 Joomla Joomla 1.5.11 Joomla Joomla 1.5.10 Joomla Joomla 1.5.9 Joomla Joomla 1.5.8 Joomla Joomla 1.5.7 Joomla Joomla 1.5.6 Joomla Joomla 1.5.5 Joomla Joomla 1.5.4 Joomla Joomla 1.5.3 Joomla Joomla 1.5.2 Joomla Joomla 1.5.1 Joomla Joomla 1.5 Joomla Joomla 1.0.15 Joomla Joomla 1.0.14 Joomla Joomla 1.0.13 Joomla Joomla 1.0.12 Joomla Joomla 1.0.11 Joomla Joomla 1.0.10 Joomla Joomla 1.0.9 Joomla Joomla 1.0.8 Joomla Joomla 1.0.7 Joomla Joomla 1.0.4 Joomla Joomla 1.0.3 Joomla Joomla 1.0.2 Joomla Joomla 1.0.1 Joomla Joomla 1.0 Joomla Joomla 1.5.0 Beta Joomla Joomla 1.5 RC3 Joomla Joomla 1.5 RC2 Joomla Joomla 1.5 RC1 Joomla Joomla 1.5 Beta 2 Joomla Joomla 1.0.15 RC4
Not Vulnerable:	Joomla Joomla 1.7.2 Joomla Joomla 1.5.24

Joomla! Unspecified Information Disclosure Vulnerabilities

Joomla! is prone to multiple unspecified remote information-disclosure vulnerabilities.

Attackers can exploit these issues to gain access to sensitive information that may aid in further attacks.

Joomla! prior to 1.5.24 and prior to 1.7.2 are vulnerable; other versions may also be affected.

Joomla! Unspecified Information Disclosure Vulnerabilities

Attackers can use a browser to exploit these issues.

Joomla! Unspecified Information Disclosure Vulnerabilities

Solution:
Vendor updates are available. Please see the references for more information.

Joomla! Unspecified Information Disclosure Vulnerabilities

References:

• Joomla News 370-20111001-core-information-disclosure (Joomla!)
  
• Joomla News 371-20111002-core-information-disclosure (Joomla!)
  
• Joomla News 372-20111003-core-information-disclosure (Joomla!)
  
• Joomla! Homepage (Joomla )