Design/Logic Flaw

2011-07-2720:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.6%

JSON

templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via unspecified vectors that trigger an undefined value of a certain error field, leading to disclosure of the installation path. NOTE: this might overlap CVE-2011-2488.

CPENameOperatorVersion
joomla\\!le1.5.22
joomla\\!eq1.5.11
joomla\\!eq1.5.13
joomla\\!eq1.5.3
joomla\\!eq1.5.2
joomla\\!eq1.5.9
joomla\\!eq1.5.18
joomla\\!eq1.5.16
joomla\\!eq1.5.4
joomla\\!eq1.5.10

Name	Operator	Version
joomla\\!	le	1.5.22
joomla\\!	eq	1.5.11
joomla\\!	eq	1.5.13
joomla\\!	eq	1.5.3
joomla\\!	eq	1.5.2
joomla\\!	eq	1.5.9
joomla\\!	eq	1.5.18
joomla\\!	eq	1.5.16
joomla\\!	eq	1.5.4
joomla\\!	eq	1.5.10

Rows per page:

1-10 of 241

References

developer.joomla.org/security/news/9-security/10-core-security/340-20110401-core-information-disclosure.html

www.joomla.org/announcements/release-news/5367-joomla-1523-released.html

www.openwall.com/lists/oss-security/2011/07/01/1

exchange.xforce.ibmcloud.com/vulnerabilities/68883