CVE-2007-4779

Cross-site scripting (XSS) vulnerability in Joomla! 1.5 before RC2 (aka Endeleo) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the archive section.

Link	Resource
http://www.joomla.org/content/view/3831/1/	Patch
http://www.securityfocus.com/bid/25508	Exploit Patch
http://securityreason.com/securityalert/3108
http://osvdb.org/38416
https://exchange.xforce.ibmcloud.com/vulnerabilities/36425
http://www.securityfocus.com/archive/1/478451/100/0/threaded

Configuration 1

cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta:*:*:*:*:*:*:*

---

Published : 2007-09-10 09:17

Updated : 2018-10-15 09:38

---

NVD link : CVE-2007-4779

Mitre link : CVE-2007-4779

No products.

CWE-79