Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) com_admin component, (2) com_search component when "Gather Search Statistics" is enabled, and (3) the category view in the com_content component.

Remediation

References

CVE-2009-1279

Related Vulnerabilities

MODX Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2010-5278)

WordPress Plugin oQey Headers 'oqey_settings.php' SQL Injection (0.3)

Jetty Uncontrolled Resource Consumption Vulnerability (CVE-2020-27223)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Multiple Cross-Site Scripting Vulnerabilities (2.9.51)

WordPress Plugin Google Maps by BestWebSoft Cross-Site Scripting (1.3.5)

Severity

Low

Classification

CVE-2009-1279 CWE-707

Tags

Missing Update Known Vulnerabilities