EUVD-2013-6680

Malware in sbrugna...

EUVD-2013-6681

Malware in sbrugna...

CVE-2013-6878

Cross-site scripting XSS vulnerability in the Mijosoft MijoSearch component 2.0.4 and earlier for Joomla! allows remote attackers to inject arbitrary web script or HTML via the query parameter to component/mijosearch/search...

CVE-2013-6879

The Mijosoft MijoSearch component 2.0.1 and earlier for Joomla! allows remote attackers to obtain sensitive information via a request to component/mijosearch/search, which reveals the installation path in an error message...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mijosoft MijoSearch component 2.0.4 and earlier for Joomla! allows remote attackers to inject arbitrary web script or HTML via the query parameter to component/mijosearch/search...

Design/Logic Flaw

The Mijosoft MijoSearch component 2.0.1 and earlier for Joomla! allows remote attackers to obtain sensitive information via a request to component/mijosearch/search, which reveals the installation path in an error message...

CVE-2013-6878

The CVE-2013-6878 entry concerns MijoSearch Joomla extension (versions 2.0.4 and earlier). The connected HTB advisory documents two vulnerabilities in MijoSearch: (1) CVE-2013-6878, a Cross-Site Scripting (XSS) flaw caused by insufficient sanitisation of user-supplied data appended to "/component...

CVE-2013-6878

Cross-site scripting XSS vulnerability in the Mijosoft MijoSearch component 2.0.4 and earlier for Joomla! allows remote attackers to inject arbitrary web script or HTML via the query parameter to component/mijosearch/search...

CVE-2013-6879

The Mijosoft MijoSearch component 2.0.1 and earlier for Joomla! allows remote attackers to obtain sensitive information via a request to component/mijosearch/search, which reveals the installation path in an error message...

CVE-2013-6879

The connected HTB advisory details CVE-2013-6879 in MijoSearch for Joomla! (version 2.0.1 and earlier). The vulnerability arises from improper error handling in /component/mijosearch/search, which allows an attacker to obtain the full installation path via an externally generated error message (i...

CVE-2013-6879: Generation of Error Message Containing Sensitive Information

The Mijosoft MijoSearch component 2.0.1 and earlier for Joomla! allows remote attackers to obtain sensitive information via a request to component/mijosearch/search, which reveals the installation path in an error message...

CVE-2013-6878: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Mijosoft MijoSearch component 2.0.4 and earlier for Joomla! allows remote attackers to inject arbitrary web script or HTML via the query parameter to component/mijosearch/search...

XSS and Full Path Disclosure in MijoSearch Joomla Extension

Advisory ID: HTB23186 Product: MijoSearch Vendor: Mijosoft Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: November 25, 2013 without technical details Vendor Notification: November 25, 2013 Public Disclosure: December 16, 2013 Vulnerability Type: Cross-Si...

MijoSearch 2.0.1 Cross Site Scripting / Exposure Vulnerabilities

MijoSearch Joomla plugin version 2.0.1 suffers from cross site scripting and information exposure vulnerabilities. Product: MijoSearch Vendor: Mijosoft Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: November 25, 2013 without technical details Vendor...

MijoSearch 2.0.1 Cross Site Scripting / Exposure

Advisory ID: HTB23186 Product: MijoSearch Vendor: Mijosoft Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: November 25, 2013 without technical details Vendor Notification: November 25, 2013 Public Disclosure: December 16, 2013 Vulnerability Type: Cross-Si...

XSS and Full Path Disclosure in MijoSearch Joomla Extension

High-Tech Bridge Security Research Lab discovered 2 vulnerabilities in MijoSearch Joomla Extension, which can be exploited to gain access to potentially sensitive data and perform Cross-Site Scripting XSS attacks against users of vulnerable application. 1 Cross-site Scripting in MijoSearch:...