The host is running Joomla! and is prone to Cross site scripting vulnerability.

Successful exploitation will allow attacker to insert arbitrary HTML and script code, which will be executed in a user's browser session in the context of an affected site. Impact Level: Application

Upgrade to Joomla! 1.5.22 or later, For updates refer to http://www.joomla.org/download.html

The flaw is caused by improper validation of user-supplied input via the 'ordering' parameter to 'index.php' which allows attackers to execute arbitrary HTML and script code on the web server.

Joomla! versions 1.0.x through 1.0.15

• http://osvdb.org/70369
• http://xforce.iss.net/xforce/xfdb/64539
• http://yehg.net/lab/pr0js/advisories/joomla/core/[joomla_1.0.x~15]_cross_site_scripting

---

Updated on 2015-03-25