CVE-2007-5427

2007-10-1223:17:00

CWE-79

mitre

web.nvd.nist.gov

cve-2007-5427

xss

vulnerability

joomla

com_search

cve-2007-4189.1

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.009

Percentile

82.9%

JSON

Cross-site scripting (XSS) vulnerability in the com_search component in Joomla! 1.0.13 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchword parameter. NOTE: this might be related to CVE-2007-4189.1.

Affected configurations

Nvd

Node

joomlacom_search_component

joomlajoomlaRange≤1.0.13

VendorProductVersionCPE
joomlacom_search_component*cpe:2.3:a:joomla:com_search_component:*:*:*:*:*:*:*:*
joomlajoomla*cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*