PT-2009-6325 · Joomla · Com Proofreader

Publicado 2009-12-02 · Atualizado 2011-01-06 · CVE-2009-4157

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions com proofreader component versions 1.0 RC9 and earlier for Joomla!

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the index.php file of the com proofreader component. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the URI. The vulnerabilities are specifically related to improper handling in 404 or error pages.

Recommendations For com proofreader component versions 1.0 RC9 and earlier, consider disabling the index.php file in the com proofreader component until a patch is available to prevent exploitation of the XSS vulnerabilities. Restrict access to error pages and 404 pages to minimize the risk of exploitation. Avoid using user-supplied input in the URI to prevent injection of arbitrary web script or HTML.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2009-4157

Produtos afetados

Com Proofreader

Referências · 4

• 🔥 http://securityfocus.com/bid/37145 · Exploit
• 🔥 https://exploit-db.com/exploits/10291 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4157 · Nota de Segurança
• http://websecurity.com.ua/3482 · Nota