Description Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header. Remediation References CVE-2012-3829 Related Vulnerabilities Atlassian Jira CVE-2012-2926 Vulnerability (CVE-2012-2926) e107 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2011-4946) WordPress Plugin Product Limited Time Availability Date for woocommerce Cross-Site Scripting (1.0.1) WordPress Plugin WP Sitemap Page Cross-Site Scripting (1.6.6) WordPress CVE-2008-6767 Vulnerability (CVE-2008-6767) Severity Medium Classification CVE-2012-3829 CWE-200 Tags Missing Update Known Vulnerabilities