Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component, or (3) multiple unspecified fields in New Menu Item.

Remediation

References

CVE-2007-5577

Related Vulnerabilities

WordPress Plugin Disable Feeds Unspecified Vulnerability (1.4)

Internet Information Services Other Vulnerability (CVE-1999-0281)

WordPress Plugin Floating Cart for WooCommerce Security Bypass (1.2.2)

MediaWiki Exposure of Resource to Wrong Sphere Vulnerability (CVE-2017-0367)

IBM RTC Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2016-0325)

Severity

Medium

Classification

CVE-2007-5577 CWE-707

Tags

Missing Update Known Vulnerabilities