CVE-2012-4235
N/A
Published: August 10, 2012 at 10:00 AM UTC
Updated: June 16, 2026 at 11:44 PM UTC
1 product affected across 1 vendorCom RSGALLERY2· also runs on 1 platform
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 1%
Description
The RSGallery2 (com_rsgallery2) component before 3.2.0 for Joomla! 2.5.x does not place index.html files in image directories, which allows remote attackers to list image filenames via a request for a directory URI.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 3.1.01.10.1 alpha1.10.10 alpha1.10.11 alpha1.10.13 alpha1.10.14 alpha1.10.2 alpha1.10.5 alpha1.10.6 alpha1.10.7 alpha1.10.8 alpha1.10.9 alpha1.11.0 alpha1.11.1 alpha1.11.10 alpha1.11.11 alpha1.11.2 alpha1.11.3 alpha1.11.4 alpha1.11.5 alpha1.11.6 alpha1.11.7 alpha1.11.8 alpha1.12.0 alpha1.12.1 alpha1.12.2 alpha1.13.0 alpha1.13.1 alpha1.14.0 alpha1.14.1 alpha1.9.0-4 alpha1.9.4 alpha1.9.5 alpha2.1.0 beta2.1.13.0 rc13.0.1
joomla-joomla (environment)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (4)
x_refsource_CONFIRM
Source: [email protected]
http://extensions.joomla.org/extensions/photos-a-images/photo-gallery/142x_refsource_CONFIRMPatch
Source: [email protected]
http://joomlacode.org/gf/download/frsrelease/17326/75428/com_rsgallery2_3.2.0.zipx_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://www.rsgallery2.nl/announcements/rsgallery2_3.2.0_and_2.3.0_released_16845.0.htmlQuick Info
StatusMODIFIED
CWE
CWE-200
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card