CVEvulnerability
CVE-2007-4779
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the archive section.
Affected configurations
• joomla joomla 1.5.0 beta
• joomla joomla 1.5.0 beta2
• joomla joomla 1.5.0 rc1
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/38416 osvdb.org
- http://securityreason.com/securityalert/3108 securityreason.com
- http://www.joomla.org/content/view/3831/1/ Patch
- http://www.securityfocus.com/archive/1/478451/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25508 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36425 exchange.xforce.ibmcloud.com
- http://osvdb.org/38416 osvdb.org
- http://securityreason.com/securityalert/3108 securityreason.com
- http://www.joomla.org/content/view/3831/1/ Patch
- http://www.securityfocus.com/archive/1/478451/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25508 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36425 exchange.xforce.ibmcloud.com