VULNERABILITY INTELLIGENCE

CVE-2011-2889

CVSS score5 MEDIUM

EPSS probability1.36%

CISA KEVNot currently listed

Published2011-07-27

Last modified2026-06-16

Description

templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via unspecified vectors that trigger an undefined value of a certain error field, leading to disclosure of the installation path. NOTE: this might overlap CVE-2011-2488.