CVE-2013-5956

MEDIUM · 4.3 CVSS Gepubliceerd: 25-04-2014 CWE-79

Beschrijving NL

Cross-site scripting (XSS) kwetsbaarheid in includes/flvthumbnail.php in de Youtube Gallery (com_youtubegallery) component 3.4.0 voor Joomla! stelt externe aanvallers in staat om willekeurig webscript of HTML te injecteren via de videofile parameter.

Origineel (Engels) tonen

Cross-site scripting (XSS) vulnerability in includes/flvthumbnail.php in the Youtube Gallery (com_youtubegallery) component 3.4.0 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the videofile parameter.

Vendors

Joomlaboat

Affected products

Com Youtubegallery

References

packetstormsecurity.com
seclists.org
seclists.org