CVE-2011-2710: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via 1 the URI to includes/application.php, reachable through index.php; and, when Internet Explorer or Konqueror is used, 2 allow remote attackers to inject...

PT-2011-4037

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.7.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved through the URI to "includes/application.php", reachable through "index.php". Additionally, when using...