CVE-2011-2889
published 2011-07-27CVE-2011-2889: templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via unspecified vectors that trigger an…
PriorityP415medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.36%
68.4th percentile
templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via unspecified vectors that trigger an undefined value of a certain error field, leading to disclosure of the installation path. NOTE: this might overlap CVE-2011-2488.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| joomla | joomla_! | <= 1.5.22 | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
| joomla | joomla_! | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://developer.joomla.org/security/news/9-security/10-core-security/340-20110401-core-information-disclosure.htmlhttp://www.joomla.org/announcements/release-news/5367-joomla-1523-released.htmlhttp://www.openwall.com/lists/oss-security/2011/07/01/1https://exchange.xforce.ibmcloud.com/vulnerabilities/68883http://developer.joomla.org/security/news/9-security/10-core-security/340-20110401-core-information-disclosure.htmlhttp://www.joomla.org/announcements/release-news/5367-joomla-1523-released.htmlhttp://www.openwall.com/lists/oss-security/2011/07/01/1https://exchange.xforce.ibmcloud.com/vulnerabilities/68883
2011-07-27
Published