CVE-2009-3368: XSS
Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or comhbssearch) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php.
Affected Software
Event History
Frequently Asked Questions
What is the CVE-2009-3368 vulnerability?
CVE-2009-3368 is a cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System component for Joomla! that allows attackers to inject arbitrary scripts via the adult parameter.
What systems are affected by CVE-2009-3368?
The vulnerability affects the com_hbssearch component of Joomla! versions that support the Hotel Booking Reservation System.
What is the impact of CVE-2009-3368?
An attacker exploiting CVE-2009-3368 can execute arbitrary web scripts or HTML in the context of the user's session.
How can I mitigate CVE-2009-3368?
To mitigate CVE-2009-3368, validate and sanitize user inputs, and consider applying patches from the vendor if available.
Is there a patch available for CVE-2009-3368?
It is recommended to check with Joomla! or HBS vendors for any updates or patches that address CVE-2009-3368.