CVE-2006-3480

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.0.10 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters involving the 1 getUserStateFromRequest function, and the 2 SEF and 3 commessages modules...