PT-2010-4341 · Interjoomla · Arforms

Drosophila + 1 · Publicado 2010-07-23 · Atualizado 2018-10-10 · CVE-2010-2846

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions InterJoomla ArtForms component version 2.1b7.2 RC2 for Joomla!

Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the afmsg parameter to "index.php".

Recommendations For version 2.1b7.2 RC2, consider restricting access to the afmsg parameter in the "index.php" endpoint until a patch is available.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-2846

Produtos afetados

Arforms

Referências · 7

• 🔥 http://exploit-db.com/exploits/14263 · Exploit
• 🔥 https://exploit-db.com/exploits/14263 · Exploit
• 🔥 http://packetstormsecurity.org/1007-exploits/joomlaartforms-sqltraversalxss.txt · Exploit
• 🔥 http://securityfocus.com/bid/41457 · Exploit
• http://securityfocus.com/archive/1/512215/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60162 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2846 · Nota de Segurança