CVE-2011-2891

Published: Jul 27, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488.

Affected (20)

Products: Joomla: Joomla!

Joomla

1 product

Joomla!

Configuration A

20 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla!	Version 1.6.0
Joomla Joomla!	Version 1.6.1
Joomla Joomla!	Version 1.6 alpha2
Joomla Joomla!	Version 1.6 alpha
Joomla Joomla!	Version 1.6 beta10
Joomla Joomla!	Version 1.6 beta11
Joomla Joomla!	Version 1.6 beta12
Joomla Joomla!	Version 1.6 beta13
Joomla Joomla!	Version 1.6 beta14
Joomla Joomla!	Version 1.6 beta15
Joomla Joomla!	Version 1.6 beta1
Joomla Joomla!	Version 1.6 beta2
Joomla Joomla!	Version 1.6 beta3
Joomla Joomla!	Version 1.6 beta4
Joomla Joomla!	Version 1.6 beta5
Joomla Joomla!	Version 1.6 beta6
Joomla Joomla!	Version 1.6 beta7
Joomla Joomla!	Version 1.6 beta8
Joomla Joomla!	Version 1.6 beta9
Joomla Joomla!	Version 1.6 rc1