CVE-2011-2891 in Joomla

Resumen

por MITRE

Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 2011-07-27
• Divulgación: 2011-07-27
• Moderación: aceptado
• Artículo: VDB-58112
• CPE: listo
• CWE: CWE-200 (confirmado)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01385
• KEV: no
• Actividades: muy bajo
• Sector: Agriculture, Lawfirm, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2891
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2891
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2891/