Description Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header. Remediation References CVE-2012-3829 Related Vulnerabilities Drupal Core 5.x Local File Inclusion (5.0 - 5.15) WordPress Plugin Disable Comments Cross-Site Request Forgery (1.0.3) Ruby Resource Management Errors Vulnerability (CVE-2014-6438) WordPress Ultimate Member Plugin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-8519) Joomla! Core 3.x.x Cross-Site Request Forgery (3.0.0 - 3.9.26) Severity Medium Classification CVE-2012-3829 CWE-200 Tags Missing Update Known Vulnerabilities