Joomla! 1.7.x < 3.7.4 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities :

• A security bypass vulnerability exists in the installer application due to a failure to properly check for ownership of a webspace. An unauthenticated, remote attacker can exploit this to gain control of another user’s webspace. Note that this vulnerability affects versions 1.0.0 through 3.7.3. (CVE-2017-11364)

• A cross-site scripting (XSS) vulnerability exists due to improper validation of user-supplied input before returning it to users. An unauthenticated, remote attacker can exploit this, via a specially crafted request, to execute arbitrary script code in a user’s browser session. Note that this vulnerability affects versions 1.5.0 through 3.7.3. (CVE-2017-11612)

Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.