CVE-2011-2890: Joomla!

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier allows remote attackers to obtain sensitive information via vectors involving the base variable, leading to disclosure of the installation path, a different vulnerability than CVE-2011-2488.

Affected products

• Joomla! Joomla!: up to and including 1.5.23; version 1.5.0 only; version 1.5.1 only; version 1.5.2 only; version 1.5.3 only; version 1.5.4 only; …

Published 2011-07-27. Last modified 2026-06-16.