CVE-2007-5577

Опубликовано: 18 окт. 2007

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component, or (3) multiple unspecified fields in New Menu Item.

Ссылки

http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654
Patch
Vendor Advisory
http://osvdb.org/37173
Broken Link
http://secunia.com/advisories/25804
Patch
Vendor Advisory
http://www.joomla.org/content/view/3670/78/
Release Notes
Vendor Advisory
http://www.joomla.org/content/view/3677/1/
Vendor Advisory
http://www.securityfocus.com/bid/24663
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35119
Third Party Advisory
VDB Entry
http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654
Patch
Vendor Advisory
http://osvdb.org/37173
Broken Link
http://secunia.com/advisories/25804
Patch
Vendor Advisory
http://www.joomla.org/content/view/3670/78/
Release Notes
Vendor Advisory
http://www.joomla.org/content/view/3677/1/
Vendor Advisory
http://www.securityfocus.com/bid/24663
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35119
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

Версия до 1.0.13 (исключая)

EPSS

Процентиль: 13%

0.00043

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-jj42-23mj-m8hv

github

почти 4 года назад