CVE-2009-3946
Joomla! before 1.5.15 allows remote attackers to read an extension’s XML file, and thereby obtain the extension’s version number, via a direct request.
Date published : 2009-11-16
http://developer.joomla.org/security/news/306-20091103-core-xml-file-read-issue.html