Multiple cross-site scripting (XSS) vulnerabilities in the Webee Comments (com_webeecomment) component 1.1.1, 1.2, and 2.0 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) color, (2) img, or (3) url BBCode tags in unspecified vectors.
References
Link | Resource |
---|---|
http://jeffchannell.com/Joomla/webee-111-multiple-vulnerabilities.html | Exploit |
http://www.securityfocus.com/bid/38204 | Exploit |
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2010-02-22 21:30
Updated : 2024-02-28 11:41
NVD link : CVE-2009-4651
Mitre link : CVE-2009-4651
CVE.ORG link : CVE-2009-4651
JSON object : View
Products Affected
onnogroen
- com_webeecomment
joomla
- joomla\!
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')