CVE

Id
28136  
CVE No.
CVE-2007-4779  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the archive section.  
Phase
Assigned (20070910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
291837 28136 CVE-2007-4779 BUGTRAQ:20070903 Multiple vulnerabilities in Joomla 1.5 RC 1  View
291838 28136 CVE-2007-4779 URL:http://www.securityfocus.com/archive/1/archive/1/478451/100/0/threaded  View
291839 28136 CVE-2007-4779 CONFIRM:http://www.joomla.org/content/view/3831/1/  View
291840 28136 CVE-2007-4779 BID:25508  View
291841 28136 CVE-2007-4779 URL:http://www.securityfocus.com/bid/25508  View
291842 28136 CVE-2007-4779 OSVDB:38416  View
291843 28136 CVE-2007-4779 URL:http://osvdb.org/38416  View
291844 28136 CVE-2007-4779 SREASON:3108  View
291845 28136 CVE-2007-4779 URL:http://securityreason.com/securityalert/3108  View
291846 28136 CVE-2007-4779 XF:joomla-archive-xss(36425)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55674 JVNDB-2007-004366 Joomla! のインストーラコンポーネントにおける任意のファイルを tmp/ へアップロードされる脆弱性 Joomla! のインストーラコンポーネントの administrator/index.php には、任意のファイルを tmp/ へアップロードされる脆弱性が存在します。 CVE-2007-4781 28136 6.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004366.html  View