Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-2710

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, (2) allow remote attackers to inject arbitrary web script or HTML via the searchword parameter in a search action to index.php in the com_search component. NOTE: vector 2 exists because of an incomplete fix for CVE-2011-2509.5.

Published

2011-07-27T20:55:03.287

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application joomla joomla\! ≤ 1.6.6 Yes
Application joomla joomla\! 1.5.0 Yes
Application joomla joomla\! 1.5.1 Yes
Application joomla joomla\! 1.5.2 Yes
Application joomla joomla\! 1.5.3 Yes
Application joomla joomla\! 1.5.4 Yes
Application joomla joomla\! 1.5.5 Yes
Application joomla joomla\! 1.5.6 Yes
Application joomla joomla\! 1.5.7 Yes
Application joomla joomla\! 1.5.8 Yes
Application joomla joomla\! 1.5.9 Yes
Application joomla joomla\! 1.5.10 Yes
Application joomla joomla\! 1.5.11 Yes
Application joomla joomla\! 1.5.12 Yes
Application joomla joomla\! 1.5.13 Yes
Application joomla joomla\! 1.5.14 Yes
Application joomla joomla\! 1.5.15 Yes
Application joomla joomla\! 1.5.15 Yes
Application joomla joomla\! 1.5.16 Yes
Application joomla joomla\! 1.5.17 Yes
Application joomla joomla\! 1.5.18 Yes
Application joomla joomla\! 1.5.19 Yes
Application joomla joomla\! 1.5.20 Yes
Application joomla joomla\! 1.5.21 Yes
Application joomla joomla\! 1.5.22 Yes
Application joomla joomla\! 1.5.23 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6 Yes
Application joomla joomla\! 1.6.0 Yes
Application joomla joomla\! 1.6.1 Yes
Application joomla joomla\! 1.6.3 Yes
Application joomla joomla\! 1.6.4 Yes
Application joomla joomla\! 1.6.5 Yes
References