CVE-2009-4578

CVE-2009-4578 is an XSS vulnerability in the Facileforms (com_facileforms) component for Joomla! and Mambo. It allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php. Connected documents confirm the flaw but do not specify affected versions or patches...

CVE-2006-5106

CVE-2006-5106 : A cross-site scripting (XSS) vulnerability affects FacileForms prior to 1.4.7 used with Mambo/Joomla! when either register_globals or RG_EMULATION is enabled. Remote attackers could inject arbitrary script/HTML via unspecified vectors. The public documentation identifies the vulne...