FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-6832

This CVE name corresponds to:

Entered	Topic
2007-01-17	joomla -- multiple remote vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-6832 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-6832
Phase	Assigned(20070101)

Description

Cross-site scripting (XSS) vulnerability in Joomla! before 1.0.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to poll.php or the module title.

References

Source	Reference
MISC	http://forge.joomla.org/sf/go/artf5985?nav=1
MISC	http://forge.joomla.org/sf/go/artf6844?nav=1
MISC	http://www.joomla.org/content/view/2495/78/
JVN	JVN#45006961
BID	21810
VUPEN	ADV-2006-5202
SECUNIA	23563