CVE

Id
47378  
CVE No.
CVE-2010-4794  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in a jscalendar action to index.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20110426)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
517383 47378 CVE-2010-4794 EXPLOIT-DB:15224  View
517384 47378 CVE-2010-4794 URL:http://www.exploit-db.com/exploits/15224  View
517385 47378 CVE-2010-4794 MISC:http://adv.salvatorefresta.net/JS_Calendar_1.5.1_Joomla_Component_Multiple_Remote_Vulnerabilities-09102010.txt  View
517386 47378 CVE-2010-4794 BID:43902  View
517387 47378 CVE-2010-4794 URL:http://www.securityfocus.com/bid/43902  View
517388 47378 CVE-2010-4794 SECUNIA:41766  View
517389 47378 CVE-2010-4794 URL:http://secunia.com/advisories/41766  View
517390 47378 CVE-2010-4794 SREASON:8223  View
517391 47378 CVE-2010-4794 URL:http://securityreason.com/securityalert/8223  View
517392 47378 CVE-2010-4794 XF:jscalendar-index-xss(62378)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33767 JVNDB-2011-004009 OrangeHRM におけるディレクトリトラバーサルの脆弱性 OrangeHRM の index.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2010-4798 47378 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004009.html  View