CVE-2013-6879

The connected HTB advisory details CVE-2013-6879 in MijoSearch for Joomla! (version 2.0.1 and earlier). The vulnerability arises from improper error handling in /component/mijosearch/search, which allows an attacker to obtain the full installation path via an externally generated error message (i...

CVE-2013-6878

The CVE-2013-6878 entry concerns MijoSearch Joomla extension (versions 2.0.4 and earlier). The connected HTB advisory documents two vulnerabilities in MijoSearch: (1) CVE-2013-6878, a Cross-Site Scripting (XSS) flaw caused by insufficient sanitisation of user-supplied data appended to "/component...