CVE-2011-4909

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.5.12 allow remote attackers to inject arbitrary web script or HTML via the HTTPREFERER header to 1 components/comcontent/views/article/tmpl/form.php, 2 components/comuser/controller.php, 3 plugins/system/legacy/html.php, or 4...

CVE-2011-4909

CVE-2011-4909 affects Joomla! prior to 1.5.12, with multiple XSS vulnerabilities exploitable via the HTTP_REFERER header. The vulnerable components/functions listed in the description include: components/com_content/views/article/tmpl/form.php, components/com_user/controller.php, plugins/system/l...