VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 27, 2011· Updated Jun 16, 2026

CVE-2011-2892

CVE-2011-2892

Description

Joomla! 1.6.x before 1.6.2 does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21
  • Joomla/Joomla!21 versions
    cpe:2.3:a:joomla:joomla\!:1.6.0:*:*:*:*:*:*:*+ 20 more
    • cpe:2.3:a:joomla:joomla\!:1.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:alpha2:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:alpha:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta10:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta11:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta12:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta13:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta14:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta15:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta1:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta2:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta3:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta4:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta5:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta6:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta7:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta8:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:beta9:*:*:*:*:*:*
    • cpe:2.3:a:joomla:joomla\!:1.6:rc1:*:*:*:*:*:*
    • (no CPE)range: >=1.6.0, <1.6.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.