medium4.3Public exploit code
CVE-2009-4157
Multiple cross-site scripting (XSS) vulnerabilities in index.php in the ProofReader (com_proofreader) component 1.0 RC9 and earlier for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component ProofReader 1.0 RC6 - Cross-Site Scripting2009-12-01 · webapps · php
Impact
Multiple cross-site scripting (XSS) vulnerabilities in index.php in the ProofReader (com_proofreader) component 1.0 RC9 and earlier for Joomla! allow remote attackers to inject arbitrary web script or HTML via the URI, which is not properly handled in (1) 404 or (2) error pages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomlatune | Com Proofreader | through 1.0 Version 1.0 |