PT-2010-3385 · Open Source Matters · Joomla!

Valentin Hoebel · Published 2010-05-06 · Updated 2017-08-17 · CVE-2010-1746

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Joomla! (affected versions not specified)

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the Table JX (com grid) component. Remote attackers can inject arbitrary web script or HTML via the data search and rpp parameters to the "index.php" endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2010-1746

Affected Products

Joomla!

References · 6

• 🔥 https://exploit-db.com/exploits/12473 · Exploit
• 🔥 http://securityfocus.com/bid/39854 · Exploit
• 🔥 http://exploit-db.com/exploits/12473 · Exploit
• http://vupen.com/english/advisories/2010/1053 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1746 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58270 · Note