Vulnerability Details CVE-2012-0837
Joomla! 1.7.x before 1.7.5 and 2.5.x before 2.5.1 allows attackers to obtain the installation path via unspecified vectors related to "administrator."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.0%
CVSS Severity
CVSS v2 Score 5.0
References
- http://developer.joomla.org/security/news/389-20120201-core-information-disclosure
- http://secunia.com/advisories/47847
- http://www.joomla.org/announcements/release-news/5410-joomla-251-released.html
- http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html
- http://www.openwall.com/lists/oss-security/2012/02/03/6
- http://www.openwall.com/lists/oss-security/2012/02/03/9
- http://www.osvdb.org/78826
- http://developer.joomla.org/security/news/389-20120201-core-information-disclosure
- http://secunia.com/advisories/47847
- http://www.joomla.org/announcements/release-news/5410-joomla-251-released.html
- http://www.joomla.org/announcements/release-news/5411-joomla-175-released.html
- http://www.openwall.com/lists/oss-security/2012/02/03/6
- http://www.openwall.com/lists/oss-security/2012/02/03/9
- http://www.osvdb.org/78826
Products affected by CVE-2012-0837
-
cpe:2.3:a:joomla:joomla!:1.7.0
-
cpe:2.3:a:joomla:joomla!:1.7.1
-
cpe:2.3:a:joomla:joomla!:1.7.2
-
cpe:2.3:a:joomla:joomla!:1.7.3
-
cpe:2.3:a:joomla:joomla!:1.7.4
-
cpe:2.3:a:joomla:joomla!:2.5.0