Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2010-1649 - Vulnerability Database

Joomla

Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2010-1649

Medium

Reference: CVE-2010-1649

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-1649

Title: Joomla Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Multiple cross-site scripting (XSS) vulnerabilities in the back end in Joomla 1.5 through 1.5.17 allow remote attackers to inject arbitrary web script or HTML via unknown vectors related to quotvarious administrator screensquot possibly the search parameter in administrator/index.php.