This host is running Joomla and is prone to multiple Cross-site scripting vulnerabilities.

Successful exploitation will allow attackers to to inject arbitrary web script or HTML via vectors involving 'multiple encoded entities'. Impact Level: Application

Upgrade to Joomla! 1.5.21 or later, For updates refer to http://www.joomla.org/download.html

The flaws are due to inadequate filtering of multiple encoded entities, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site.

Joomla! versions 1.5.x before 1.5.21

• http://developer.joomla.org/security/news/9-security/10-core-security/322-20101001-core-xss-vulnerabilities
• http://www.vupen.com/english/advisories/2010/2615

---

Updated on 2015-03-25