Record summary

CVE-2009-4651 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.

Description

Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) color, (2) img, or (3) url BBCode tags in unspecified vectors.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBJoomla! Component Webee Comments 1.1/1.2 - Multiple BBCode Tags Cross-Site Scripting VulnerabilitiesExploitDB exploitby Jeff ChannellNot analyzed1 file
ExploitDB

PoC details

References

3