exploits , vulnerabilities , articles , Joomla! Cross Site Scripting and Information Disclosure Vulnerabilities

Title	Joomla! Cross Site Scripting and Information Disclosure Vulnerabilities
Published	2009-07-01-12:00AM
Updated	2009-07-02-05:19PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	Juan Galiana Lara (Internet Security Auditors), Paul Boekholt (Byte Internet)
Vulnerable	Joomla Joomla 1.5.11 Joomla Joomla 1.5.10 Joomla Joomla 1.5.9 Joomla Joomla 1.5.8 Joomla Joomla 1.5.7 Joomla Joomla 1.5.6 Joomla Joomla 1.5.5 Joomla Joomla 1.5.4 Joomla Joomla 1.5.3 Joomla Joomla 1.5.2 Joomla Joomla 1.5.1 Joomla Joomla 1.5 Joomla Joomla 1.5.0 Beta Joomla Joomla 1.5 RC3 Joomla Joomla 1.5 RC2 Joomla Joomla 1.5 RC1 Joomla Joomla 1.5 Beta 2
Not Vulnerable	Joomla Joomla 1.5.12
Code	Attackers can use a browser to exploit these issues. To exploit a cross-site scripting vulnerability, an attacker must entice an unsuspecting victim to follow a malicious URI. The following exploit code is available: /data/vulnerabilities/exploits/35544.html
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-09 HP OpenView Network Node Manager Multiple Remote Code Execution Vulnerabilities
• 2009-12-09 Shibboleth Redirection URL HTML Injection Vulnerability
• 2009-12-09 VLC Media Player RTSP Remote Buffer Overflow Vulnerability
• 2009-12-09 Polipo Malformed HTTP GET Request Memory Corruption Vulnerability
• 2009-12-09 PhpShop Cross-Site Scripting and SQL Injection Vulnerabilities
• 2009-12-09 GNU GRUB Local Authentication Bypass Vulnerability
• 2009-12-09 NTP mode 7 MODE_PRIVATE Packet Remote Denial of Service Vulnerability
• 2009-12-08 LightNEasy fckeditor Arbitrary File Upload Vulnerability
• 2009-12-08 HP OpenView Data Protector Application Recovery Manager Stack Buffer Overflow Vulnerability
• 2009-12-08 RETIRED: Microsoft December 2009 Advance Notification Multiple Vulnerabilities

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Wed, 09 Dec 2009 23:14:18 +0000