CVE-2011-4830

Executive Summary

Informations
Name	CVE-2011-4830	First vendor Publication	2011-12-14
Vendor	Cve	Last vendor Modification	2011-12-15

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:S/C:N/I:P/A:N)
Cvss Base Score	3.5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Medium
Cvss Expoit Score	6.8	Authentification	Requires single instance
Calculate full CVSS 2.0 Vectors scores

Detail

Multiple cross-site scripting (XSS) vulnerabilities in the com_listing component in Barter Sites component 1.3 for Joomla! allow remote authenticated users to inject arbitrary web script or HTML via the (1) listing_title, (2) description, (3) homeurl (aka Website Address), (4) paystring (aka Payment types accepted), (5) sell_price, (6) shipping_cost, and (7) quantity parameters to index.php.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4830

CWE : Common Weakness Enumeration

id	Name
CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting')

CPE : Common Platform Enumeration

Type	Description	Count
Application	Barter-Sites Com Listing cpe:/a:barter-sites:com_listing:1.3	1

Open Source Vulnerability Database (OSVDB)

id	Description
76269	Barter Component for Joomla! index.php Multiple Parameter XSS

Internal Sources (Detail)

Source	Url
EXPLOIT-DB	http://www.exploit-db.com/exploits/18046
MISC	http://docs.joomla.org/Vulnerable_Extensions_List#Barter_Sites_1.3 http://my.barter-sites.com/index.php?option=com_content&view=article&...