Description

Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488.

Remediation

References

CVE-2011-2891

Related Vulnerabilities

Jenkins Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-27901)

WordPress Plugin WooCommerce Product Feed Manager Security Bypass (2.2.3)

Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2022-42127)

OpenSSL CVE-2021-4160 Vulnerability (CVE-2021-4160)

WordPress Plugin mb.miniAudioPlayer-an HTML5 audio player for your mp3 files Multiple Cross-Site Scripting Vulnerabilities (1.3.8)

Severity

Medium

Classification

CVE-2011-2891 CWE-200

Tags

Missing Update Known Vulnerabilities