CVE-2013-6878

Cross-site scripting XSS vulnerability in the Mijosoft MijoSearch component 2.0.4 and earlier for Joomla! allows remote attackers to inject arbitrary web script or HTML via the query parameter to component/mijosearch/search...

CVE-2013-6878

The CVE-2013-6878 entry concerns MijoSearch Joomla extension (versions 2.0.4 and earlier). The connected HTB advisory documents two vulnerabilities in MijoSearch: (1) CVE-2013-6878, a Cross-Site Scripting (XSS) flaw caused by insufficient sanitisation of user-supplied data appended to "/component...

XSS and Full Path Disclosure in MijoSearch Joomla Extension

Advisory ID: HTB23186 Product: MijoSearch Vendor: Mijosoft Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: November 25, 2013 without technical details Vendor Notification: November 25, 2013 Public Disclosure: December 16, 2013 Vulnerability Type: Cross-Si...

MijoSearch 2.0.1 Cross Site Scripting / Exposure Vulnerabilities

MijoSearch Joomla plugin version 2.0.1 suffers from cross site scripting and information exposure vulnerabilities. Product: MijoSearch Vendor: Mijosoft Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: November 25, 2013 without technical details Vendor...

MijoSearch 2.0.1 Cross Site Scripting / Exposure

Advisory ID: HTB23186 Product: MijoSearch Vendor: Mijosoft Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: November 25, 2013 without technical details Vendor Notification: November 25, 2013 Public Disclosure: December 16, 2013 Vulnerability Type: Cross-Si...