CVE-2007-5427 Cross-site scripting (XSS) vulnerability in the com_search component in Joomla! 1.0.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchword parameter. NOTE: th...
MediumCVSS 4.3
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the com_search component in Joomla! 1.0.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchword parameter. NOTE: this might be related to CVE-2007-4189.1.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomla com search component | All versions | No fix listed |
| joomla | <= 1.0.13 | No fix listed |
References
- 37709 vdb-entry
- 27196 third-party-advisory
- 3216 third-party-advisory
- securityvulns.ru exploit
- websecurity.com.ua
- 20071010 Vulnerabilities digest mailing-list
- 26031 vdb-entry
- ADV-2007-3495 vdb-entry