Joomla! CVE-2011-4332 Cross-Site Scripting Vulnerability

Bugtraq ID:	73645
Class:	Input Validation Error
CVE:	CVE-2011-4332
Remote:	Yes
Local:	No
Published:	Nov 23 2011 12:00AM
Updated:	Nov 23 2011 12:00AM
Credit:	Unknown
Vulnerable:	Joomla Joomla! 1.6.6 Joomla Joomla! 1.6.4 Joomla Joomla! 1.6.3 Joomla Joomla! 1.6.1 Joomla Joomla! 1.6 Joomla Joomla! 1.6.5 Joomla Joomla! 1.6 RC1 Joomla Joomla! 1.6 Beta9 Joomla Joomla! 1.6 Beta8 Joomla Joomla! 1.6 Beta7 Joomla Joomla! 1.6 Beta6 Joomla Joomla! 1.6 Beta5 Joomla Joomla! 1.6 Beta4 Joomla Joomla! 1.6 Beta3 Joomla Joomla! 1.6 Beta2 Joomla Joomla! 1.6 Beta15 Joomla Joomla! 1.6 Beta14 Joomla Joomla! 1.6 Beta13 Joomla Joomla! 1.6 Beta12 Joomla Joomla! 1.6 Beta11 Joomla Joomla! 1.6 Beta10 Joomla Joomla! 1.6 Beta1 Joomla Joomla! 1.6 Alpha2 Joomla Joomla! 1.6 Alpha
Not Vulnerable:

Joomla! CVE-2011-4332 Cross-Site Scripting Vulnerability

Joomla! is prone to a cross-site scripting vulnerability. Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.6.3 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Joomla! CVE-2011-4332 Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Joomla! CVE-2011-4332 Cross-Site Scripting Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]

Joomla! CVE-2011-4332 Cross-Site Scripting Vulnerability

References:

• Full Disclosure: XSS vulnerability in Joomla 1.6.3 (FULLDISC)
  
• http://developer.joomla.org/security/news/349-20110601-xss-vulnerabilities.html (CONFIRM)
  
• oss-security - Re: Fwd: XSS vulnerability in Joomla 1.6.3 (MLIST)
  
• XSS vulnerability in Joomla 1.6.3 (Mesut Timur)