medium4.3
CVE-2007-4779
Cross-site scripting (XSS) vulnerability in Joomla!
Impact
Cross-site scripting (XSS) vulnerability in Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the archive section.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla | Versions 1.5.0_beta, 1.5.0_beta2, 1.5.0_rc1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/38416
- http://securityreason.com/securityalert/3108
- http://www.joomla.org/content/view/3831/1/
- http://www.securityfocus.com/archive/1/478451/100/0/threaded
- http://www.securityfocus.com/bid/25508
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36425
- http://osvdb.org/38416
- http://securityreason.com/securityalert/3108
- http://www.joomla.org/content/view/3831/1/
- http://www.securityfocus.com/archive/1/478451/100/0/threaded
- http://www.securityfocus.com/bid/25508
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36425