Articles Thread, [20090102] - Core - plg_xstandard Directory Traversal in Joomla; [20090102] - Core - plg_xstandard Directory Traversal Project: Joomla! SubProject: plg_xstandard Severity: High Versions: 1.5.8 and all previous 1.5 releases ...

Short Link: http://forum.egypt.com/enforum/showthread.php?t=18807

Developer · 19-01-2009, 01:16 PM

[20090102] - Core - plg_xstandard Directory Traversal

Project: Joomla!
SubProject: plg_xstandard
Severity: High
Versions: 1.5.8 and all previous 1.5 releases
Exploit type: Directory Traversal
Reported Date: 2009-January-7
Fixed Date: 2009-January-9

Description

A crafted request can cause disclosure of the directory structure on the server (including any directory that php has access to).
Affected Installs

All 1.5.x installs prior to and including 1.5.8 are affected.
Solution

Upgrade to latest Joomla! version (1.5.9 or newer).

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)