CVE-2009-1938

Description

Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to database output and the frontend administrative panel.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/50923

http://www.vupen.com/english/advisories/2009/1497

http://www.osvdb.org/54868

http://www.joomla.org/announcements/release-news/5235-joomla-1511-security-release-now-available.html

http://secunia.com/advisories/35278

http://developer.joomla.org/security/news/297-20090602-core-frontend-xss.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3