Description
Joomla! before 1.5.15 allows remote attackers to read an extension's XML file, and thereby obtain the extension's version number, via a direct request.
Remediation
References
Related Vulnerabilities
WordPress Plugin User Access Manager Cross-Site Scripting (1.2.14)
phpMyAdmin Other Vulnerability (CVE-2005-3621)
MySQL Other Vulnerability (CVE-2002-1809)
Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-20417)
WordPress Plugin WHOIS 'domain' Parameter Cross-Site Scripting (1.4.2.2)