PT-2013-5656 · Php Internationalization+1 · Idna Convert+1

Publicado 2013-12-29 · Atualizado 2022-05-17 · CVE-2013-5583

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Joomla! version 3.1.5

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the lang parameter in the example.php file of the idna convert library.

Recommendations For Joomla! version 3.1.5, consider restricting access to the vulnerable example.php file in the idna convert library to minimize the risk of exploitation. Avoid using the lang parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2013-5583

GHSA-5XMG-W578-GQ5J

Produtos afetados

Joomla!

Idna Convert

Referências · 9

• 🔥 http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability · Exploit
• https://github.com/joomla/joomla-cms · Nota
• https://github.com/joomla/joomla-cms/commit/c00c033d33d901e1ca6be9061a44e55acd041b1f · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-5583 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-5xmg-w578-gq5j · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5583 · Nota
• https://web.archive.org/web/20130810103125/http://securityfocus.com/bid/61600 · Nota
• https://web.archive.org/web/20130810034709/http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability · Nota
• http://securityfocus.com/bid/61600 · Nota