What’s Vulnerable › Vulnerabilities

CVE-2011-2890

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2011-07-27 · updated 2026-06-16
• Weakness: CWE-200

Description

The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier allows remote attackers to obtain sensitive information via vectors involving the base variable, leading to disclosure of the installation path, a different vulnerability than CVE-2011-2488.

Affected products

• Joomla!: through 1.5.23; 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5 (+18)

References

• http://www.openwall.com/lists/oss-security/2011/07/01/1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68882
• http://www.openwall.com/lists/oss-security/2011/07/01/1
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68882

Get alerted when CVE-2011-2890 or the next vulnerability affects your stack