Description

Joomla! 1.6.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by libraries/phpmailer/language/phpmailer.lang-joomla.php.

Remediation

References

CVE-2011-3747

Related Vulnerabilities

WordPress 3.8.x Cross-Site Scripting Vulnerability (3.8 - 3.8.11)

Craft CMS Missing Encryption of Sensitive Data Vulnerability (CVE-2018-20465)

SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2978)

OpenVPN AS Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2020-36382)

MyBB Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-3965)

Severity

Medium

Classification

CVE-2011-3747 CWE-200

Tags

Missing Update Known Vulnerabilities