Cross site scripting

Cross-site scripting XSS vulnerability in the comsearch module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitrary web script or HTML via the ordering parameter to index.php...

CVE-2011-0005

CVE-2011-0005 : Joomla! 1.0.x through 1.0.15 contains a cross-site scripting (XSS) vulnerability in the com_search module that allows injection of arbitrary script/HTML via the ordering parameter to index.php. Affected component: Joomla! core com_search (index.php parameter ordering). Root cause:...