CVE-2011-2891
27.07.2011, 20:55
Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488.Enginsight
| Vendor | Product | Version |
|---|---|---|
| joomla | joomla\! | 1.6:alpha |
| joomla | joomla\! | 1.6:alpha2 |
| joomla | joomla\! | 1.6:beta1 |
| joomla | joomla\! | 1.6:beta10 |
| joomla | joomla\! | 1.6:beta11 |
| joomla | joomla\! | 1.6:beta12 |
| joomla | joomla\! | 1.6:beta13 |
| joomla | joomla\! | 1.6:beta14 |
| joomla | joomla\! | 1.6:beta15 |
| joomla | joomla\! | 1.6:beta2 |
| joomla | joomla\! | 1.6:beta3 |
| joomla | joomla\! | 1.6:beta4 |
| joomla | joomla\! | 1.6:beta5 |
| joomla | joomla\! | 1.6:beta6 |
| joomla | joomla\! | 1.6:beta7 |
| joomla | joomla\! | 1.6:beta8 |
| joomla | joomla\! | 1.6:beta9 |
| joomla | joomla\! | 1.6:rc1 |
| joomla | joomla\! | 1.6.0 |
| joomla | joomla\! | 1.6.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References