[20090102] – Core – plg_xstandard Directory Traversal
- Project: Joomla!
- SubProject: plg_xstandard
- Severity: High
- Versions: 1.5.8 and all previous 1.5 releases
- Exploit type: Directory Traversal
- Reported Date: 2009-January-7
- Fixed Date: 2009-January-9
Description
A crafted request can cause disclosure of the directory structure on the server (including any directory that php has access to).
Affected Installs
All 1.5.x installs prior to and including 1.5.8 are affected.
Solution
Upgrade to latest Joomla! version (1.5.9 or newer).
Contact
The JSST at the Joomla! Security Center.
