CVE-2010-1649

CVE-2010-1649: Joomla! 1.5.x back end (versions 1.5–1.5.17) contains multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary script via input on administrator screens, notably the search parameter in administrator/index.php. The issue stems from insufficient inpu...