Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header. (CVSS:5.0) (Last Update:2012-07-17)

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to “Inadequate filtering” and a “SQL error.” (CVSS:5.0) (Last Update:2012-07-17)

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to gain privileges via unknown attack vectors related to “Inadequate checking.” (CVSS:7.5) (Last Update:2012-07-04)