CVE-2009-1279

Joomla! 1.5-1.5.9 - Cross-Site Scripting in Multiple Components

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! 1.5 through 1.5.9 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to the (1) com_admin component, (2) com_search component when "Gather Search Statistics" is enabled, and (3) the category view in the com_content component.

References (6)

Core 6
Core References
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34360
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34551
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49655
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49654

Scores

EPSS 0.0001
EPSS Percentile 1.5%

Details

CWE
CWE-79
Status published
Products (11)
joomla/joomla 1.5
joomla/joomla 1.5.0 beta (4 CPE variants)
joomla/joomla 1.5.1
joomla/joomla 1.5.2
joomla/joomla 1.5.3
joomla/joomla 1.5.4
joomla/joomla 1.5.5
joomla/joomla 1.5.6
joomla/joomla 1.5.7
joomla/joomla 1.5.8
... and 1 more
Published Apr 09, 2009
Tracked Since Feb 18, 2026