Re: CVE request: joomla before 1.5.21 XSS

[Josh Bressers <bressers () redhat com>]

Please use CVE-2010-3712 for this.

Thanks.

-- 
    JB
----- "Hanno Böck" <hanno () hboeck de> wrote:

> http://developer.joomla.org/security/news/9-security/10-core-security/322-20101001-core-xss-
> vulnerabilities
>
>
>   [20101001] - Core - XSS Vulnerabilities
>
>     * Project: Joomla!
>     * SubProject: All
>     * Severity: Medium
>     * Versions: 1.5.20 and all previous 1.5 releases
>     * Exploit type: XSS Injection
>     * Reported Date: 2010-October-05
>     * Fixed Date: 2010-October-08
>
> Description
>
> Inadequate filtering of multiple encoded entities permits XSS attacks
> in some
> circumstances.
> Affected Installs
>
> All 1.5.x installs prior to and including 1.5.20 are affected.
> -- 
> Hanno Böck            Blog:           http://www.hboeck.de/
> GPG: 3DBD3B20         Jabber/Mail:    hanno () hboeck de
>
> http://schokokeks.org - professional webhosting