Joomla! Cross-site Scripting vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2013-5583 · ADVISORY
• joomla/joomla-cms commit c00c033 · WEB
• joomla/joomla-cms · PACKAGE
• web.archive.org/web/20130810034709/http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability · WEB
• web.archive.org/web/20130810103125/http://www.securityfocus.com/bid/61600 · WEB
• disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability · Exploit
• securityfocus.com/bid/61600

joomla/joomla-cms のその他の脆弱性

• CVE-2025-25227高 7.5Insufficient state checks lead to a vector that allows to bypass 2FA checks.
• CVE-2019-16725中 6.1In Joomla! 3.x before 3.9.12, inadequate escaping allowed XSS attacks using the logo parameter of the default templates.
• CVE-2019-7743緊急 9.8An issue was discovered in Joomla! before 3.9.3. The phar:// stream wrapper can be used for objection injection attacks because there is no …
• CVE-2018-11326中 4.8An issue was discovered in Joomla! Core before 3.8.8. Inadequate input filtering leads to a multiple XSS vulnerabilities. Additionally, the …
• CVE-2011-4332中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HT…