Detections
Analytics
CVE-2008-6299
medium
Description
Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5.7 and earlier allow remote authenticated users with certain privileges to inject arbitrary web script or HTML via (1) the title and description parameters to the com_weblinks module and (2) unspecified vectors in the com_content module related to "article submission."
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/46523
http://www.vupen.com/english/advisories/2008/3104
http://www.securityfocus.com/bid/32263
http://www.joomla.org/announcements/release-news/5219-joomla-158-released.html
http://secunia.com/advisories/32622
http://developer.joomla.org/security/news/284-20081102-core-comweblinks-xss-vulnerability.html
http://developer.joomla.org/security/news/283-20081101-core-comcontent-xss-vulnerability.html