Description

templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via unspecified vectors that trigger an undefined value of a certain error field, leading to disclosure of the installation path. NOTE: this might overlap CVE-2011-2488.

Remediation

References

CVE-2011-2889

Related Vulnerabilities

Moment.js Other Vulnerability (CVE-2022-31129)

Chamilo Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-4224)

WordPress Plugin blogVault Real-time Backup PHP Object Injection (1.44)

Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2022-48566)

WordPress Plugin Print-O-Matic Cross-Site Scripting (2.1.7)

Severity

Medium

Classification

CVE-2011-2889 CWE-200

Tags

Missing Update Known Vulnerabilities