Cross-Site Scripting Vulnerability in Joomla! JExtensions JE Awd Song Component
CVE-2010-2613

Currently unrated

Key Information:

Vendor

Harmistechnology

Status
Com Awd Song
Vendor
CVE Published:
2 July 2010

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2010-2613?

The JE Awd Song component for Joomla! contains a cross-site scripting vulnerability that allows attackers to inject arbitrary web scripts or HTML into the song review field. This occurs due to inadequate input validation in the view action handling of index.php, posing a significant risk to users who interact with the affected component. Attackers can exploit this weakness to execute malicious scripts in the context of a user's session.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2010-2613 - Proof of Concept

CVE-2010-2613 - Proof of Concept

References

http://www.securityfocus.com/bid/41165
vdb-entryx_refsource_BID
http://www.exploit-db.com/exploits/14059
exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/59807
vdb-entryx_refsource_XF

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.