CVE-2007-5427

Joomla com_search < 1.0.13 - Cross-Site Scripting via searchword Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-5427. PoCs published by MustLive.

AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Joomla! 1.0.13 by injecting a malicious script via the 'searchword' parameter in the search component. The PoC shows how arbitrary JavaScript can be executed in the context of the affected site.

Description

Cross-site scripting (XSS) vulnerability in the com_search component in Joomla! 1.0.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchword parameter. NOTE: this might be related to CVE-2007-4189.1.

Exploits (1)

exploitdb WORKING POC VERIFIED

by MustLive · textwebappsphp

https://www.exploit-db.com/exploits/30655

View Code ZIP pw:eip

This exploit demonstrates a cross-site scripting (XSS) vulnerability in Joomla! 1.0.13 by injecting a malicious script via the 'searchword' parameter in the search component. The PoC shows how arbitrary JavaScript can be executed in the context of the affected site.

Classification

Working Poc 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Joomla! 1.0.13

No auth needed

Prerequisites: Access to the Joomla! search component

MITRE ATT&CK