Description
Joomla! Core is prone to a variable injection vulnerability. Exploiting this issue may allow attackers to inject unwanted characters into returned data; other attacks with unspecified impact are also possible. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.6 are vulnerable.
Remediation
Update to Joomla! Core version 1.5.7 or latest
References
Related Vulnerabilities
Drupal Core 7.x Directory Traversal (7.0 - 7.66)
WordPress Plugin Cherry Cross-Site Scripting (1.2.8.1)
WordPress Plugin Baggage Freight Shipping Australia Arbitrary File Upload (0.1.0)
WordPress Plugin The Holiday Calendar Cross-Site Scripting (1.11.2)
WordPress Plugin Carousel slideshow Arbitrary File Upload (3.11)