CVE-2007-4189

Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the (1) com_search, (2) com_content, and (3) mod_login components. NOTE: some of these details are obtained from third party information.

• CWE-79

• http://osvdb.org/38755Broken Link
• http://osvdb.org/38756Broken Link
• http://osvdb.org/38757Broken Link
• http://secunia.com/advisories/26239Patch, Vendor Advisory
• http://www.joomla.org/content/view/3677/1/Vendor Advisory
• http://www.vupen.com/english/advisories/2007/2719Third Party Advisory
• http://osvdb.org/38755Broken Link
• http://osvdb.org/38756Broken Link
• http://osvdb.org/38757Broken Link
• http://secunia.com/advisories/26239Patch, Vendor Advisory
• http://www.joomla.org/content/view/3677/1/Vendor Advisory
• http://www.vupen.com/english/advisories/2007/2719Third Party Advisory

Published

Aug 8, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-4183SQL injection vulnerability in main.php in paBugs 2.0 Beta 3…
• CVE-2007-4184SQL injection vulnerability in administrator/popups/pollwind…
• CVE-2007-4185Joomla! 1.0.12 allows remote attackers to obtain sensitive i…
• CVE-2007-4186PHP remote file inclusion vulnerability in admin.tour_toto.p…
• CVE-2007-4187Multiple eval injection vulnerabilities in the com_search co…
• CVE-2007-4188Session fixation vulnerability in Joomla! before 1.0.13 (aka…
• CVE-2007-4190CRLF injection vulnerability in Joomla! before 1.0.13 (aka S…
• CVE-2007-4191Panda Antivirus 2008 stores service executables under the pr…
• CVE-2007-4192Multiple cross-site scripting (XSS) vulnerabilities in IDE G…
• CVE-2007-4193Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2007-4194Guidance Software EnCase 5.0 allows user-assisted remote att…
• CVE-2007-4195Use-after-free vulnerability in ext2fs.c in Brian Carrier Th…