PT-2010-4142 · Joomla · Com Awd Song

Sid3^Effects · Publicado 2010-07-01 · Atualizado 2017-08-17 · CVE-2010-2613

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Joomla! component com awd song (affected versions not specified)

Description A cross-site scripting (XSS) issue exists due to improper handling of user input in the song review field. This allows remote attackers to inject arbitrary web script or HTML, potentially leading to security breaches. The issue is specifically related to the view action in index.php.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-2613

Produtos afetados

Com Awd Song

Referências · 6

• 🔥 http://packetstormsecurity.org/1006-exploits/joomlaawdsong-xss.txt · Exploit
• 🔥 http://exploit-db.com/exploits/14059 · Exploit
• 🔥 https://exploit-db.com/exploits/14059 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59807 · Nota
• http://securityfocus.com/bid/41165 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2613 · Nota de Segurança