PT-2011-3908 · Open Source Matters · Joomla!

Published 2011-07-27 · Updated 2022-05-14 · CVE-2011-2509

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.6.4

Description The issue allows remote attackers to inject arbitrary web script or HTML via various components, including (1) the com contact component, as demonstrated by the Itemid parameter to "index.php"; (2) the com content component, as demonstrated by the filter order parameter to "index.php"; (3) the com newsfeeds component, as demonstrated by an arbitrary parameter to "index.php"; or (4) the option parameter in a reset.request action to "index.php". Additionally, when using Internet Explorer or Konqueror, attackers can inject arbitrary web script or HTML via the searchword parameter in a search action to "index.php" in the com search component.

Recommendations For versions prior to 1.6.4, update to version 1.6.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the com contact, com content, com newsfeeds, and com search components until a patch is applied. Avoid using the Itemid, filter order, and searchword parameters in the affected API endpoints until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-2509

GHSA-VCQ7-X4WR-W2MJ

Affected Products

Joomla!

References · 7

• 🔥 http://openwall.com/lists/oss-security/2011/06/28/4 · Exploit
• 🔥 http://openwall.com/lists/oss-security/2011/06/29/12 · Exploit
• https://osv.dev/vulnerability/GHSA-vcq7-x4wr-w2mj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2509 · Security Note
• http://developer.joomla.org/security/news/352-20110604-xss-vulnerability.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2509 · Note
• http://yehg.net/lab/pr0js/advisories/joomla/core/%5Bjoomla_1.6.3%5D_cross_site_scripting%28XSS%29 · Note