Description

Joomla! before 1.5.12 does not perform a JEXEC check in unspecified files, which allows remote attackers to obtain the installation path via unspecified vectors.

Remediation

References

CVE-2011-4911

Related Vulnerabilities

WordPress Plugin Classified Listing Pro & Directory Cross-Site Scripting (2.0.19)

WordPress Plugin Premium Blocks for Gutenberg Unspecified Vulnerability (1.7.4)

Oracle JRE CVE-2020-2590 Vulnerability (CVE-2020-2590)

OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2178)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Privilege Escalation (2.1.11)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2011-4911