jeffchannell.com
http://jeffchannell.com/Joomla/webee-111-multiple-vulnerabilities.html CVE-2009-4651
Joomla! Component Webee Comments 1.1/1.2 - Multiple BBCode Tags Cross-Site Scripting Vulnerabilities
Record summary
CVE-2009-4651 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) color, (2) img, or (3) url BBCode tags in unspecified vectors.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBJoomla! Component Webee Comments 1.1/1.2 - Multiple BBCode Tags Cross-Site Scripting VulnerabilitiesExploitDB exploitby Jeff ChannellNot analyzed1 file
References
338204vdb entry
http://www.securityfocus.com/bid/38204 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2009-4651