This host is installed with Joomla and is prone to cross site scripting vulnerability.

Successful exploitation will allow attacker to execute arbitrary HTML and script code in a user's browser session in the context of an affected site. Impact Level: Application

Upgrade to Joomla version 3.1.6 or later, For updates refer to www.joomla.org

Input passed via the 'lang' parameter to '/libraries/idna_convert/example.php' script is not properly sanitized before being returned to the user.

Joomla version 3.1.5 and prior.

Send a crafted data via HTTP GET request and check whether it is able to read cookie or not.

• http://seclists.org/bugtraq/2013/Aug/27
• http://secunia.com/advisories/54353
• http://www.osvdb.com/95998
• https://github.com/joomla/joomla-cms/issues/1658

---

Updated on 2017-03-28