CVE-2011-0005

Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitrary web script or HTML via the ordering parameter to index.php.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:joomla:com_search:*:*:*:*:*:*:*:*
OR cpe:2.3:a:joomla:joomla\!:1.0.15:*:*:*:*:*:*:*
cpe:2.3:a:joomla:joomla\!:1.0.0:*:*:*:*:*:*:*

Information

Published : 2011-01-10 19:00

Updated : 2018-10-10 13:09


NVD link : CVE-2011-0005

Mitre link : CVE-2011-0005


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

joomla

  • com_search
  • joomla\!