CVE-2011-2891

N/A Unknown

Published: July 27, 2011 Modified: April 29, 2026

Description

Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://bl0g.yehg.net/2011/04/joomla-161-and-lower-information.html

Source: cve@mitre.org

Exploit

http://developer.joomla.org/security/news/341-20110402-core-information-disclosure.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2011/06/27/6

Source: cve@mitre.org

Exploit

http://www.openwall.com/lists/oss-security/2011/06/27/8

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/68881

Source: cve@mitre.org

http://bl0g.yehg.net/2011/04/joomla-161-and-lower-information.html