PT-2013-5656 · Php Internationalization+1 · Idna Convert+1

Published 2013-12-29 · Updated 2022-05-17 · CVE-2013-5583

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Joomla! version 3.1.5

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the lang parameter in the example.php file of the idna convert library.

Recommendations For Joomla! version 3.1.5, consider restricting access to the vulnerable example.php file in the idna convert library to minimize the risk of exploitation. Avoid using the lang parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2013-5583

GHSA-5XMG-W578-GQ5J

Affected Products

Joomla!

Idna Convert

References · 9

• 🔥 http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5583 · Security Note
• https://osv.dev/vulnerability/GHSA-5xmg-w578-gq5j · Vendor Advisory
• https://github.com/joomla/joomla-cms · Note
• https://github.com/joomla/joomla-cms/commit/c00c033d33d901e1ca6be9061a44e55acd041b1f · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5583 · Note
• https://web.archive.org/web/20130810103125/http://securityfocus.com/bid/61600 · Note
• https://web.archive.org/web/20130810034709/http://disse.cting.org/2013/08/05/joomla-core-3_1_5_reflected-xss-vulnerability · Note
• http://securityfocus.com/bid/61600 · Note