Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header. (CVSS:5.0) (Last Update:2012-07-17)