Description
Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488.
Remediation
References
Related Vulnerabilities
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more Cross-Site Scripting (1.6.4)
WordPress Plugin Pondol Form to Mail Cross-Site Scripting (1.1)
Drupal Deserialization of Untrusted Data Vulnerability (CVE-2020-28948)
WordPress 'edit.php' Cross-Site Scripting Vulnerability (1.5)
PHP Resource Management Errors Vulnerability (CVE-2015-4024)