CVE-2011-2488 — Sensitive Information Exposure in Joomla !

CWE-200 — Sensitive Information Exposure8 documents2 sources
Severity
5.0MEDIUMNVD
EPSS
0.0%
top 98.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Joomla !
Timeline
PublishedJul 27
Latest updateMay 17

Description

Joomla! before 1.5.23 does not properly check for errors, which allows remote attackers to obtain sensitive information via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDjoomla/joomla_!1.5.23+27

Patches

Patch: www.joomla.org ↗Patch: www.openwall.com ↗Patch: www.openwall.com ↗

🔴Vulnerability Details

4
GHSA
GHSA-xx4v-fp2m-hmpv: Joomla! 1↗2022-05-17
▶
GHSA
GHSA-7gr4-5g4h-q48g: templates/system/error↗2022-05-17
▶
GHSA
GHSA-xcjj-4x65-hrvc: Joomla! before 1↗2022-05-17
▶
GHSA
GHSA-xwcc-7hmc-296q: The MediaViewMedia class in administrator/components/com_media/views/media/view↗2022-05-17
▶