CVE request: joomla before 1.5.21 XSS

[Hanno Böck <hanno () hboeck de>]

http://developer.joomla.org/security/news/9-security/10-core-security/322-20101001-core-xss-
vulnerabilities


  [20101001] - Core - XSS Vulnerabilities

    * Project: Joomla!
    * SubProject: All
    * Severity: Medium
    * Versions: 1.5.20 and all previous 1.5 releases
    * Exploit type: XSS Injection
    * Reported Date: 2010-October-05
    * Fixed Date: 2010-October-08

Description

Inadequate filtering of multiple encoded entities permits XSS attacks in some
circumstances.
Affected Installs

All 1.5.x installs prior to and including 1.5.20 are affected.
-- 
Hanno Böck              Blog:           http://www.hboeck.de/
GPG: 3DBD3B20           Jabber/Mail:    hanno () hboeck de

http://schokokeks.org - professional webhosting

Attachment: signature.asc
Description: This is a digitally signed message part.