First published: Wed Jul 27 2011(Updated: )
Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Joomla | =1.6-beta15 | |
Joomla | =1.6-beta12 | |
Joomla | =1.6-beta3 | |
Joomla | =1.6-beta13 | |
Joomla | =1.6.1 | |
Joomla | =1.6-beta8 | |
Joomla | =1.6-beta5 | |
Joomla | =1.6.0 | |
Joomla | =1.6-beta1 | |
Joomla | =1.6-beta6 | |
Joomla | =1.6-beta7 | |
Joomla | =1.6-beta14 | |
Joomla | =1.6-beta11 | |
Joomla | =1.6-beta2 | |
Joomla | =1.6-alpha2 | |
Joomla | =1.6-alpha | |
Joomla | =1.6-beta4 | |
Joomla | =1.6-rc1 | |
Joomla | =1.6-beta9 | |
Joomla | =1.6-beta10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.