CVE-2009-4579

https://notcve.org/view.php?id=CVE-2009-4579

Cross-site scripting (XSS) vulnerability in the Artist avenue (com_artistavenue) component for Joomla! and Mambo allows remote attackers to inject arbitrary web script or HTML via the Itemid parameter to index.php. Vulnerabilidad de secuencias de comandos (XSS) en el componente Artist avenue (com_artistavenue) para Joomla!, y Mambo permite a atacantes remotos ejecutar código web o HTML de su elección a través del parámetro Itemid en index.php. • http://packetstormsecurity.org/0912-exploits/joomlaartistavenue-xss.txt http://www.exploit-db.com/exploits/10818 http://www.securityfocus.com/bid/37537 https://exchange.xforce.ibmcloud.com/vulnerabilities/55214 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •