Com Restaurantguide CVE-2010-4928 Cross-Site Scripting Vulnerability

Bugtraq ID:	73831
Class:	Input Validation Error
CVE:	CVE-2010-4928
Remote:	Yes
Local:	No
Published:	Oct 09 2011 12:00AM
Updated:	Oct 09 2011 12:00AM
Credit:	Unknown
Vulnerable:	Photoindochina Com Restaurantguide 1.0.0
Not Vulnerable:

Com Restaurantguide CVE-2010-4928 Cross-Site Scripting Vulnerability

Com Restaurantguide is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in the Restaurant Guide (com_restaurantguide) component 1.0.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML by placing it after a > (greater than) character.

Com Restaurantguide CVE-2010-4928 Cross-Site Scripting Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.

Com Restaurantguide CVE-2010-4928 Cross-Site Scripting Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]

Com Restaurantguide CVE-2010-4928 Cross-Site Scripting Vulnerability

References:

• http://packetstormsecurity.org/1009-exploits/joomlarestaurantguide-sqlxsslfi.txt (MISC)
  
• Joomla Component (com_restaurantguide) Multiple Vulnerabilities (EXPLOIT-DB)
  
• Joomla Restaurant Guide Cross Site Scripting / Local File Inclusion / SQL Inject (SREASON)