Description
Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation path via unspecified vectors related to "administrator."
Remediation
References
Related Vulnerabilities
Apache Traffic Server Improper Access Control Vulnerability (CVE-2014-3624)
WordPress Plugin RSS Feed Reader 'rss_url' Parameter Cross-Site Scripting (0.1)
WordPress Plugin One User Avatar-User Profile Picture Multiple Vulnerabilities (2.3.6)
WordPress Plugin Image Widget Unspecified Vulnerability (4.1.2)