Joomla! CVE-2011-2710 Cross-Site Scripting Vulnerability
BID:73647
Info
Joomla! CVE-2011-2710 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73647 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-2710 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 27 2011 12:00AM |
| Updated: | Jul 27 2011 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Joomla Joomla! 1.6.6 Joomla Joomla! 1.6.4 Joomla Joomla! 1.6.3 Joomla Joomla! 1.6.1 Joomla Joomla! 1.6 Joomla Joomla! 1.5.22 Joomla Joomla! 1.5.21 Joomla Joomla! 1.5.20 Joomla Joomla! 1.5.19 Joomla Joomla! 1.5.18 Joomla Joomla! 1.5.17 Joomla Joomla! 1.5.16 Joomla Joomla! 1.5.15 Joomla Joomla! 1.5.14 Joomla Joomla! 1.5.13 Joomla Joomla! 1.5.12 Joomla Joomla! 1.5.11 Joomla Joomla! 1.5.10 Joomla Joomla! 1.5.9 Joomla Joomla! 1.5.8 Joomla Joomla! 1.5.7 Joomla Joomla! 1.5.6 Joomla Joomla! 1.5.5 Joomla Joomla! 1.5.4 Joomla Joomla! 1.5.2 Joomla Joomla! 1.6.5 Joomla Joomla! 1.6 RC1 Joomla Joomla! 1.6 Beta9 Joomla Joomla! 1.6 Beta8 Joomla Joomla! 1.6 Beta7 Joomla Joomla! 1.6 Beta6 Joomla Joomla! 1.6 Beta5 Joomla Joomla! 1.6 Beta4 Joomla Joomla! 1.6 Beta3 Joomla Joomla! 1.6 Beta2 Joomla Joomla! 1.6 Beta15 Joomla Joomla! 1.6 Beta14 Joomla Joomla! 1.6 Beta13 Joomla Joomla! 1.6 Beta12 Joomla Joomla! 1.6 Beta11 Joomla Joomla! 1.6 Beta10 Joomla Joomla! 1.6 Beta1 Joomla Joomla! 1.6 Alpha2 Joomla Joomla! 1.6 Alpha Joomla Joomla! 1.5.3 Joomla Joomla! 1.5.15 Rc Joomla Joomla! 1.5.1 Joomla Joomla! 1.5.0 |
| Not Vulnerable: | |
Exploit / POC
Joomla! CVE-2011-2710 Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
Joomla! CVE-2011-2710 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
References
Joomla! CVE-2011-2710 Cross-Site Scripting Vulnerability
References:
References:
- [20110701] - XSS Vulnerability (Joomla!)
- http://yehg.net/lab/pr0js/advisories/joomla/core/%5Bjoomla_1.7.0-rc%5D_cross_sit (MISC)
- oss-security - CVE Request: Joomla! 1.7.0-RC and lower | Cross Site Scripting Vu (MLIST)
- oss-security - Duplicate CVE assigned: CVE-2011-2708 CVE-2011-2710 (MLIST)
- oss-security - Re: CVE Request: Joomla! 1.7.0-RC and lower | Cross Site Script (MLIST)
- oss-security - Re: Fwd: XSS vulnerability in Joomla 1.6.3 - CVE-2011-2710 / CV (MLIST)