Search vulnerabilities

Results 2

Export CSV
CVE-2008-1848

Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a show_error action to index.php.

CVSS 2.0 · 4.3 Medium EPSS 1.4% KEV · Not listed
Vendors
CVE-2008-1849

Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter in a show_error action.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed