Joomla! 'ordering' Parameter Cross-Site Scripting Vulnerability
BID:45679
Info
Joomla! 'ordering' Parameter Cross-Site Scripting Vulnerability
| Bugtraq ID: | 45679 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-0005 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 06 2011 12:00AM |
| Updated: | Apr 13 2015 09:02PM |
| Credit: | Aung Khant |
| Vulnerable: |
SocialMPN SocialMPN 1.0.5 Joomla Joomla 1.0.15 Joomla Joomla 1.0.14 Joomla Joomla 1.0.13 Joomla Joomla 1.0.12 Joomla Joomla 1.0.11 Joomla Joomla 1.0.10 Joomla Joomla 1.0.9 Joomla Joomla 1.0.8 Joomla Joomla 1.0.7 Joomla Joomla 1.0.4 Joomla Joomla 1.0.3 Joomla Joomla 1.0.2 Joomla Joomla 1.0.1 Joomla Joomla 1.0 |
| Not Vulnerable: |
Joomla Joomla 1.5.22 Joomla Joomla 1.5.21 Joomla Joomla 1.5.20 Joomla Joomla 1.5.19 Joomla Joomla 1.5.18 Joomla Joomla 1.5.17 Joomla Joomla 1.5.16 Joomla Joomla 1.5.15 Joomla Joomla 1.5.14 Joomla Joomla 1.5.13 Joomla Joomla 1.5.12 Joomla Joomla 1.5.11 Joomla Joomla 1.5.10 Joomla Joomla 1.5.9 Joomla Joomla 1.5.8 Joomla Joomla 1.5.7 Joomla Joomla 1.5.6 Joomla Joomla 1.5.5 Joomla Joomla 1.5.4 Joomla Joomla 1.5.3 Joomla Joomla 1.5.2 Joomla Joomla 1.5.1 |
Discussion
Joomla! 'ordering' Parameter Cross-Site Scripting Vulnerability
The Joomla! Search component is prone to a cross-site-scripting vulnerability because the application fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
The Joomla! Search component is prone to a cross-site-scripting vulnerability because the application fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
Joomla! 'ordering' Parameter Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
The following example URI is available:
http://www.example.com/joomla1015/index.php?option=com_search&searchword=xss&searchphrase=any&ordering=newest%22%20onmousemove=alert%28document.cookie%29%20style=position:fixed;top:0;left:0;width:100%;height:100%;%
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
The following example URI is available:
http://www.example.com/joomla1015/index.php?option=com_search&searchword=xss&searchphrase=any&ordering=newest%22%20onmousemove=alert%28document.cookie%29%20style=position:fixed;top:0;left:0;width:100%;height:100%;%
Solution / Fix
Joomla! 'ordering' Parameter Cross-Site Scripting Vulnerability
Solution:
Updates are available. Please see the reference for more details.
Solution:
Updates are available. Please see the reference for more details.
References
Joomla! 'ordering' Parameter Cross-Site Scripting Vulnerability
References:
References:
- Joomla! Homepage (Joomla )
- Joomla! 1.0.x ~ 1.0.15 | Cross Site Scripting (XSS) Vulnerability (YGN Ethical Hacker Group )