CVEvulnerability
CVE-2007-5577
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component, or (3) multiple unspecified fields in New Menu Item.
Affected configurations
• joomla joomla\! (< 1.0.13)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654 Patch, Vendor Advisory
- http://osvdb.org/37173 Broken Link
- http://secunia.com/advisories/25804 Patch, Vendor Advisory
- http://www.joomla.org/content/view/3670/78/ Release Notes, Vendor Advisory
- http://www.joomla.org/content/view/3677/1/ Vendor Advisory
- http://www.securityfocus.com/bid/24663 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35119 Third Party Advisory, VDB Entry
- http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654 Patch, Vendor Advisory
- http://osvdb.org/37173 Broken Link
- http://secunia.com/advisories/25804 Patch, Vendor Advisory
- http://www.joomla.org/content/view/3670/78/ Release Notes, Vendor Advisory
- http://www.joomla.org/content/view/3677/1/ Vendor Advisory
- http://www.securityfocus.com/bid/24663 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35119 Third Party Advisory, VDB Entry