Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Joomla Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability - CVE-2007-4190 - Vulnerability Database
Joomla

Joomla Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability - CVE-2007-4190

Medium
Reference: CVE-2007-4190
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2007-4190
Title: Joomla Improper Neutralization of Special Elements in Output Used by a Downstream Component (Injection) Vulnerability
Overview:

CRLF injection vulnerability in Joomla before 1.0.13 (aka Sunglow) allows remote attackers to inject arbitrary HTTP headers and probably conduct HTTP response splitting attacks via CRLF sequences in the url parameter. NOTE: this can be leveraged for cross-site scripting (XSS) attacks. NOTE: some of these details are obtained from third party information.