Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via (1) "GET and other variables" and (2) "SEF".

Remediation

References

CVE-2005-3771

Related Vulnerabilities

Oracle JRE CVE-2013-5780 Vulnerability (CVE-2013-5780)

WordPress Plugin Ultimate Reviews PHP Object Injection (2.1.32)

Moodle Improper Input Validation Vulnerability (CVE-2012-1168)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3092)

WordPress Plugin Mobile blocks Security Bypass (1.0)

Severity

Medium

Classification

CVE-2005-3771

Tags

Missing Update Known Vulnerabilities