Joomla! CVE-2010-2535 Cross-Site Scripting Vulnerability

Bugtraq ID:	73751
Class:	Input Validation Error
CVE:	CVE-2010-2535
Remote:	Yes
Local:	No
Published:	Oct 05 2010 12:00AM
Updated:	Oct 05 2010 12:00AM
Credit:	Unknown
Vulnerable:	Joomla Joomla! 1.5.19 Joomla Joomla! 1.5.18 Joomla Joomla! 1.5.17 Joomla Joomla! 1.5.16 Joomla Joomla! 1.5.15 Joomla Joomla! 1.5.14 Joomla Joomla! 1.5.13 Joomla Joomla! 1.5.12 Joomla Joomla! 1.5.11 Joomla Joomla! 1.5.10 Joomla Joomla! 1.5.9 Joomla Joomla! 1.5.8 Joomla Joomla! 1.5.7 Joomla Joomla! 1.5.6 Joomla Joomla! 1.5.5 Joomla Joomla! 1.5.4 Joomla Joomla! 1.5.2 Joomla Joomla! 1.5.3 Joomla Joomla! 1.5.15 Rc Joomla Joomla! 1.5.1 Joomla Joomla! 1.5.0
Not Vulnerable:

Joomla! CVE-2010-2535 Cross-Site Scripting Vulnerability

Joomla! is prone to a cross-site scripting vulnerability. Multiple cross-site scripting (XSS) vulnerabilities in the Back End in Joomla! 1.5.x before 1.5.20 allow remote authenticated users to inject arbitrary web script or HTML via administrator screens.

Joomla! CVE-2010-2535 Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Joomla! CVE-2010-2535 Cross-Site Scripting Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]

Joomla! CVE-2010-2535 Cross-Site Scripting Vulnerability

References:

• #2010-002 Joomla input sanitization errors (XSS) (oCERT)
  
• [20100704] - Core - XSS Vulnerabillitis in Back End (Joomla!)
  
• oss-security - [oCERT-2010-002] Joomla input sanitization errors (XSS) (MLIST)
  
• oss-security - Re: [oCERT-2010-002] Joomla input sanitization errors (XSS) (MLIST)