CVE-2010-1649: XSS
First published: Mon Jun 07 2010(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla! 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to "various administrator screens," possibly the search parameter in administrator/index.php.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Joomla Joomla\! | =1.5.0 | |
| Joomla Joomla\! | =1.5.1 | |
| Joomla Joomla\! | =1.5.2 | |
| Joomla Joomla\! | =1.5.3 | |
| Joomla Joomla\! | =1.5.4 | |
| Joomla Joomla\! | =1.5.5 | |
| Joomla Joomla\! | =1.5.6 | |
| Joomla Joomla\! | =1.5.7 | |
| Joomla Joomla\! | =1.5.8 | |
| Joomla Joomla\! | =1.5.9 | |
| Joomla Joomla\! | =1.5.10 | |
| Joomla Joomla\! | =1.5.11 | |
| Joomla Joomla\! | =1.5.12 | |
| Joomla Joomla\! | =1.5.13 | |
| Joomla Joomla\! | =1.5.14 | |
| Joomla Joomla\! | =1.5.15 | |
| Joomla Joomla\! | =1.5.16 | |
| Joomla Joomla\! | =1.5.17 | |
| Joomla | =1.5.0 | |
| Joomla | =1.5.1 | |
| Joomla | =1.5.2 | |
| Joomla | =1.5.3 | |
| Joomla | =1.5.4 | |
| Joomla | =1.5.5 | |
| Joomla | =1.5.6 | |
| Joomla | =1.5.7 | |
| Joomla | =1.5.8 | |
| Joomla | =1.5.9 | |
| Joomla | =1.5.10 | |
| Joomla | =1.5.11 | |
| Joomla | =1.5.12 | |
| Joomla | =1.5.13 | |
| Joomla | =1.5.14 | |
| Joomla | =1.5.15 | |
| Joomla | =1.5.16 | |
| Joomla | =1.5.17 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.osvdb.org/65011
- http://secunia.com/advisories/39964
- http://www.securityfocus.com/bid/40444
- http://developer.joomla.org/security/news/314-20100501-core-xss-vulnerabilities-in-back-end.html?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+JoomlaSecurityNews+%28Joomla!+Security+News%29
- http://developer.joomla.org/security/news/314-20100501-core-xss-vulnerabilities-in-back-end.html?utm_source=feedburner&utm_medium=email&utm_campaign=Feed%3A+JoomlaSecurityNews+%28Joomla%21+Security+News%29
- collector/nvd-api
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/references
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/joomla
- canonical/joomla joomla\!
- version/joomla joomla\!/1.5.0
- version/joomla joomla\!/1.5.1
- version/joomla joomla\!/1.5.2
- version/joomla joomla\!/1.5.3
- version/joomla joomla\!/1.5.4
- version/joomla joomla\!/1.5.5
- version/joomla joomla\!/1.5.6
- version/joomla joomla\!/1.5.7
- version/joomla joomla\!/1.5.8
- version/joomla joomla\!/1.5.9
- version/joomla joomla\!/1.5.10
- version/joomla joomla\!/1.5.11
- version/joomla joomla\!/1.5.12
- version/joomla joomla\!/1.5.13
- version/joomla joomla\!/1.5.14
- version/joomla joomla\!/1.5.15
- version/joomla joomla\!/1.5.16
- version/joomla joomla\!/1.5.17
- canonical/joomla
- version/joomla/1.5.0
- version/joomla/1.5.1
- version/joomla/1.5.2
- version/joomla/1.5.3
- version/joomla/1.5.4
- version/joomla/1.5.5
- version/joomla/1.5.6
- version/joomla/1.5.7
- version/joomla/1.5.8
- version/joomla/1.5.9
- version/joomla/1.5.10
- version/joomla/1.5.11
- version/joomla/1.5.12
- version/joomla/1.5.13
- version/joomla/1.5.14
- version/joomla/1.5.15
- version/joomla/1.5.16
- version/joomla/1.5.17