PT-2011-1983 · Joomla · Jcomments

Publicado 2011-11-23 · Atualizado 2018-10-10 · CVE-2010-5048

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions JComments (com jcomments) component version 2.1.0.0 for Joomla!

Description The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to "index.php".

Recommendations For JComments (com jcomments) component version 2.1.0.0, avoid using the name parameter in the affected "index.php" until the issue is resolved.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2010-5048

Produtos afetados

Jcomments

Referências · 8

• 🔥 http://securityfocus.com/bid/40230 · Exploit
• 🔥 http://htbridge.ch/advisory/xss_vulnerability_in_jcomments_joomla.html · Exploit
• 🔥 https://exploit-db.com/exploits/33998 · Exploit
• http://secunia.com/advisories/39842 · Aviso do Fabricante
• http://joomlatune.com/jcomments-v.2.2-release-notes.html · Nota
• http://securityfocus.com/archive/1/511320/100/0/threaded · Nota
• http://packetstormsecurity.org/1005-exploits/joomlajcomments-xss.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-5048 · Nota de Segurança