Looking for the vulnerability index of Invicti's legacy products?
Joomla Debug Console enabled - Vulnerability Database

Joomla Debug Console enabled

Description

The Joomla Debug Console is currently enabled on this web application. This diagnostic feature is designed for development purposes and displays detailed system information including database queries, memory usage, loaded extensions, and application configuration details. When enabled in production environments, it exposes sensitive technical information that should remain confidential.

Remediation

Disable the Joomla Debug Console immediately in production environments by following these steps:

1. Log in to the Joomla Administrator panel
2. Navigate to System → Global Configuration
3. Select the 'System' tab
4. Under 'Debug Settings', set 'Debug System' to 'No'
5. Click 'Save & Close'

Alternatively, disable debug mode directly in the configuration file by setting the following in configuration.php:

public $debug = 0;

If debugging is required for development purposes, restrict access using IP whitelisting at the web server level or ensure the debug console is only enabled in isolated development environments that are not publicly accessible.

Related Vulnerabilities