PT-2006-6800 · Ryan Demmer · Joomla Content Editor+1

Publicado 2006-11-29 · Atualizado 2008-09-05 · CVE-2006-6166

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions JCE Admin Component in Ryan Demmer Joomla Content Editor version 1.0.4

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the mosConfig live site parameter. This can be exploited by attackers to execute malicious scripts on the victim's browser.

Recommendations For version 1.0.4, apply the 20060821 jce patch to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-6166

Produtos afetados

Jce Admin

Joomla Content Editor

Referências · 4

• http://forum.joomla.org/index.php?topic=113796.new#new · Correção
• http://cellardoor.za.net/index.php?option=com_docman&task=doc_download&gid=51&Itemid=6 · Correção
• http://cellardoor.za.net/index.php?option=com_content&task=view&id=28 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-6166 · Nota de Segurança