Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) color, (2) img, or (3) url BBCode tags in unspecified vectors.
References
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 01:10
Type | Values Removed | Values Added |
---|---|---|
References | () http://jeffchannell.com/Joomla/webee-111-multiple-vulnerabilities.html - Exploit | |
References | () http://www.securityfocus.com/bid/38204 - Exploit |
Information
Published : 2010-02-22 21:30
Updated : 2024-11-21 01:10
NVD link : CVE-2009-4651
Mitre link : CVE-2009-4651
CVE.ORG link : CVE-2009-4651
JSON object : View
Products Affected
onnogroen
- com_webeecomment
joomla
- joomla\!
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')