CVE-2011-2891 in Joomla

Riassunto

di MITRE

Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 27/07/2011
• Divulgazione: 27/07/2011
• Moderazione: accettato
• Voce: VDB-58112
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01385
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Lawfirm, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2891
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2891
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2891/