08-03-2011, 06:50 PM
|
#1
|
|
Administrator
Fecha de Ingreso: Nov 2005
Mensajes: 262
|
[20110203] - Core - XSS Vulnerabilities
- Project: Joomla!
- SubProject: All
- Severity: Moderate
- Versions: 1.6.0
- Exploit type: Cross Site Scripting
- Reported Date: 2011-January-23
- Fixed Date: 2011-March-07
Description
Inadequate checking for double URI encoding leads to XSS vulnerabilities.
Affected Installs
Joomla! Version 1.6.0 installs.
Solution
Upgrade to the latest Joomla! version (16.1 or later)
Reported by Hoyt LLC Research
Contact
The JSST at the Joomla! Security Center.
</img>
More...
|
|
|