← Back to CVEs
CVE-2011-0005
N/ADescription
Cross-site scripting (XSS) vulnerability in the com_search module for Joomla! 1.0.x through 1.0.15 allows remote attackers to inject arbitrary web script or HTML via the ordering parameter to index.php.
CVE Details
CVSS v3.1 ScoreN/A
Published1/11/2011
Last Modified4/29/2026
Sourcenvd
Honeypot Sightings0
Affected Products
joomla:com_searchjoomla:joomla\!
Weaknesses (CWE)
CWE-79
References
http://osvdb.org/70369(secalert@redhat.com)
http://packetstormsecurity.org/files/view/97273/joomla1015-xss.txt(secalert@redhat.com)
http://www.securityfocus.com/archive/1/515553/100/0/threaded(secalert@redhat.com)
http://www.securityfocus.com/archive/1/515590/100/0/threaded(secalert@redhat.com)
http://www.securityfocus.com/bid/45679(secalert@redhat.com)
http://yehg.net/lab/pr0js/advisories/joomla/core/%5Bjoomla_1.0.x~15%5D_cross_site_scripting(secalert@redhat.com)
https://exchange.xforce.ibmcloud.com/vulnerabilities/64539(secalert@redhat.com)
http://osvdb.org/70369(af854a3a-2127-422b-91ae-364da2661108)
http://packetstormsecurity.org/files/view/97273/joomla1015-xss.txt(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/515553/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/515590/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/45679(af854a3a-2127-422b-91ae-364da2661108)
http://yehg.net/lab/pr0js/advisories/joomla/core/%5Bjoomla_1.0.x~15%5D_cross_site_scripting(af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/64539(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.