Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 8 Oct 2010 23:19:11 +0200
From: Hanno Böck <>
Subject: CVE request: joomla before 1.5.21 XSS

  [20101001] - Core - XSS Vulnerabilities

    * Project: Joomla!
    * SubProject: All
    * Severity: Medium
    * Versions: 1.5.20 and all previous 1.5 releases
    * Exploit type: XSS Injection
    * Reported Date: 2010-October-05
    * Fixed Date: 2010-October-08


Inadequate filtering of multiple encoded entities permits XSS attacks in some
Affected Installs

All 1.5.x installs prior to and including 1.5.20 are affected.
Hanno Böck		Blog:
GPG: 3DBD3B20		Jabber/Mail: - professional webhosting

Download attachment "signature.asc " of type "application/pgp-signature" (199 bytes)

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ