Cross-site scripting (XSS) vulnerability in Joomla! 2.5.3 allows remote attackers to inject arbitrary web script or HTML via the Host HTTP Header. (CVSS:4.3) (Last Update:2012-07-17)

Joomla! 2.5.3 allows remote attackers to obtain the installation path via the Host HTTP Header. (CVSS:5.0) (Last Update:2012-07-17)

Unspecified vulnerability in Joomla! 2.5.x before 2.5.5 allows remote attackers to obtain sensitive information via vectors related to “Inadequate filtering” and a “SQL error.” (CVSS:5.0) (Last Update:2012-07-17)