CVE-2010-4794

Опубликовано: 27 апр. 2011

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in a jscalendar action to index.php. NOTE: some of these details are obtained from third party information.

Ссылки

http://adv.salvatorefresta.net/JS_Calendar_1.5.1_Joomla_Component_Multiple_Remote_Vulnerabilities-09102010.txt
Exploit
Vendor Advisory
http://secunia.com/advisories/41766
Vendor Advisory
http://securityreason.com/securityalert/8223
http://www.exploit-db.com/exploits/15224
Exploit
http://www.securityfocus.com/bid/43902
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/62378
http://adv.salvatorefresta.net/JS_Calendar_1.5.1_Joomla_Component_Multiple_Remote_Vulnerabilities-09102010.txt
Exploit
Vendor Advisory
http://secunia.com/advisories/41766
Vendor Advisory
http://securityreason.com/securityalert/8223
http://www.exploit-db.com/exploits/15224
Exploit
http://www.securityfocus.com/bid/43902
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/62378

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:joomlaseller:com_jscalendar:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:joomlaseller:com_jscalendar:1.5.4:*:*:*:*:*:*:*

cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.0034

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-f5rx-c6g6-f629

github

больше 3 лет назад