CVE-2012-4235

N/A Unknown

Published: August 10, 2012 Modified: April 29, 2026

Description

The RSGallery2 (com_rsgallery2) component before 3.2.0 for Joomla! 2.5.x does not place index.html files in image directories, which allows remote attackers to list image filenames via a request for a directory URI.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142

Source: cve@mitre.org

http://joomlacode.org/gf/download/frsrelease/17326/75428/com_rsgallery2_3.2.0.zip

Source: cve@mitre.org

Patch

http://joomlacode.org/gf/project/rsgallery2/news/

Source: cve@mitre.org

http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html

Source: cve@mitre.org

Vendor Advisory

http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142

Source: af854a3a-2127-422b-91ae-364da2661108

http://joomlacode.org/gf/download/frsrelease/17326/75428/com_rsgallery2_3.2.0.zip

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://joomlacode.org/gf/project/rsgallery2/news/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

1.4%

68th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-200

Affected Vendors

rsgallery2 joomla

Related CVEs