Test ID:	1.3.6.1.4.1.25623.1.0.901168
Category:	Web application abuses
Title:	Joomla! Multiple Cross-site Scripting Vulnerabilities
Summary:	Joomla is prone to multiple Cross-site scripting vulnerabilities.
Description:	Summary: Joomla is prone to multiple Cross-site scripting vulnerabilities. Vulnerability Insight: The flaws are due to inadequate filtering of multiple encoded entities, which could be exploited by attackers to cause arbitrary scripting code to be executed by the user's browser in the security context of an affected Web site. Vulnerability Impact: Successful exploitation will allow attackers to inject arbitrary web script or HTML via vectors involving 'multiple encoded entities'. Affected Software/OS: Joomla! versions 1.5.x before 1.5.21 Solution: Upgrade to Joomla! 1.5.21 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3712 http://yehg.net/lab/pr0js/advisories/joomla/core/%5Bjoomla_1.5.20%5D_cross_site_scripting(XSS) http://www.openwall.com/lists/oss-security/2010/10/08/4 http://www.openwall.com/lists/oss-security/2010/10/11/4 http://www.openwall.com/lists/oss-security/2011/03/13/8 http://www.openwall.com/lists/oss-security/2011/03/14/22 http://www.openwall.com/lists/oss-security/2011/03/18/5 http://www.openwall.com/lists/oss-security/2011/03/18/3
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.