Description

Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488.

Remediation

References

CVE-2011-2891

Related Vulnerabilities

phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5730)

Liferay Portal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-42122)

WordPress Plugin Daily Prayer Time Cross-Site Scripting (2023.03.20)

WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.1.5)

Ampache Deserialization of Untrusted Data Vulnerability (CVE-2017-18375)

Severity

Medium

Classification

CVE-2011-2891 CWE-200

Tags

Missing Update Known Vulnerabilities