icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons icons_061

Joomla! 1.7 < 1.7.2 Multiple Information Disclosure Vulnerabilities

Medium

Synopsis

The remote web server has an application that is vulnerable to multiple attack vectors.

Description

The remote web server is hosting Joomla!, a content management system written in PHP.

Versions of Joomla 1.7 earlier than 1.7.2 are potentially affected by multiple information disclosure vulnerabilities :

- A weak encryption mechanism could lead to information disclosure.

- Inadequate error checking could lead to information disclosure.

Solution

Upgrade to Joomla! 1.7.2 or later.