FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-5577

This CVE name corresponds to:

Entered	Topic
2007-08-02	joomla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2007-5577 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2007-5577
Phase	Assigned(20071018)

Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via the (1) Title or (2) Section Name form fields in the Section Manager component, or (3) multiple unspecified fields in New Menu Item.

References

Source	Reference
MISC	http://www.joomla.org/content/view/3677/1/
CONFIRM	http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=5654
CONFIRM	http://www.joomla.org/content/view/3670/78/
BID	24663
OSVDB	37173
SECUNIA	25804
XF	joomla-section-manager-xss(35119)